New mentor request: WebRequest.SecurityInfo in Controlled Frame

[dom...@chromium.org]

A new Chromium specification mentor request was submitted via the form:

Requestor email

vk...@google.com

API or proposal name

WebRequest.SecurityInfo in Controlled Frame

Brief description

This proposal introduces a WebRequest.SecurityInfo API for ControlledFrame. It allows a web app to intercept an HTTPS, WSS or WebTransport request to a server, retrieve the server's certificate fingerprint (as verified by the browser), and then use that fingerprint to manually verify the certificate of a separate raw TCP/UDP connection to the same server. This provides a simple way for the app to confirm it's talking to the correct server.

Chrome Platform Status entry

https://chromestatus.com/feature/5076692209106944

If you're interested in mentoring, please volunteer by replying to this email! Otherwise, jyas...@chromium.org will assign someone within the next 2 business days.

[Dominic Farolino]

I reviewed the spec for the original WebRequest.SecurityInfo, so I'll take this addition. Please CC me on spec things vkrot@ and feel free to reach out here or internally with any questions.

--
You received this message because you are subscribed to the Google Groups "spec-mentors" group.
To unsubscribe from this group and stop receiving emails from it, send an email to spec-mentors...@chromium.org.
To view this discussion visit https://groups.google.com/a/chromium.org/d/msgid/spec-mentors/CAJnPROx%2Bjr1KdAe7-X_aiMibT%3D-MBaJ7hyN%3D%2Be2d3Je-KBBm7g%40mail.gmail.com.
For more options, visit https://groups.google.com/a/chromium.org/d/optout.