Re:Facebook To Buy Opera? Maybe.
by kijin on Friday May 25, 2012 @08:52PM
(#4026018)
Separate sandboxes per domain sounds a bit extreme. A lot of websites are made up of content from different domains, like images pulled from CDNs. Whitelisting each of them would be an even bigger headache than managing NoScript.
What I'd like to see in the short term is per-tab isolation. If I'm logged into Google/Facebook/etc in one tab and browse other sites in another tab, I want to have the ability to prevent the second tab from knowing which user I'm logged into in the first tab. This could also solve a lot of CSRF problems.
Unfortunately, Firefox -- the only browser that is likely to support such behavior either as a built-in feature or as an add-on -- doesn't even run tabs in separate processes. One tab freezes, the whole browser freezes. Urgh.
What I'd like to see in the short term is per-tab isolation. If I'm logged into Google/Facebook/etc in one tab and browse other sites in another tab, I want to have the ability to prevent the second tab from knowing which user I'm logged into in the first tab. This could also solve a lot of CSRF problems.
Unfortunately, Firefox -- the only browser that is likely to support such behavior either as a built-in feature or as an add-on -- doesn't even run tabs in separate processes. One tab freezes, the whole browser freezes. Urgh.