updated feature: WebRequest.SecurityInfo in Controlled Frame

0 views
Skip to first unread message

Chromestatus

unread,
Jan 23, 2026, 3:53:17 PM (12 days ago) Jan 23
to iwa...@chromium.org
Chrome Platform Status
Updated feature entry:
WebRequest.SecurityInfo in Controlled Frame
Updates made by elmira...@google.com:
  • is_releasenotes_content_reviewed:
    Old: False
    New: True

Your next steps:

You are receiving this email because:

  • You are subscribed to all IWA features

Unsubscribe

Chromestatus

unread,
Jan 27, 2026, 1:15:45 PM (9 days ago) Jan 27
to iwa...@chromium.org
Chrome Platform Status
Updates made by siobhan...@google.com:
  • is_releasenotes_publish_ready:
    Old: False
    New: True

  • summary:
    Old: This feature introduces a WebRequest.SecurityInfo API for [ControlledFrame](https://developer.chrome.com/docs/iwa/controlled-frame). It allows a web app to intercept an HTTPS, WSS or WebTransport request to a server, retrieve the server's certificate fingerprint (as verified by the browser), and then use that fingerprint to manually verify the certificate of a separate raw TCP/UDP connection to the same server. This provides a simple way for the app to confirm it's talking to the correct server.
    New: This feature introduces a WebRequest.SecurityInfo API for [ControlledFrame](https://developer.chrome.com/docs/iwa/controlled-frame). It allows a web app to intercept an HTTPS, WSS, or WebTransport request to a server, retrieve the server's certificate fingerprint (as verified by the browser), and then use that fingerprint to manually verify the certificate of a separate raw TCP/UDP connection to the same server. This provides a simple way for the app to confirm it's communicating with the correct server.

Your next steps:
Reply all
Reply to author
Forward
0 new messages