New mentor request: WebRequest.SecurityInfo in Controlled Frame

0 views
Skip to first unread message

dom...@chromium.org

unread,
Nov 17, 2025, 9:13:27 AMNov 17
to spec-m...@chromium.org, vk...@google.com, jyas...@chromium.org

A new Chromium specification mentor request was submitted via the form:

Requestor email
vk...@google.com
API or proposal name
WebRequest.SecurityInfo in Controlled Frame
Brief description
This proposal introduces a WebRequest.SecurityInfo API for ControlledFrame. It allows a web app to intercept an HTTPS, WSS or WebTransport request to a server, retrieve the server's certificate fingerprint (as verified by the browser), and then use that fingerprint to manually verify the certificate of a separate raw TCP/UDP connection to the same server. This provides a simple way for the app to confirm it's talking to the correct server.
Chrome Platform Status entry
https://chromestatus.com/feature/5076692209106944

If you're interested in mentoring, please volunteer by replying to this email! Otherwise, jyas...@chromium.org will assign someone within the next 2 business days.

Dominic Farolino

unread,
Nov 18, 2025, 9:22:33 AMNov 18
to dom...@chromium.org, spec-m...@chromium.org, vk...@google.com, jyas...@chromium.org
I reviewed the spec for the original WebRequest.SecurityInfo, so I'll take this addition. Please CC me on spec things vkrot@ and feel free to reach out here or internally with any questions.

--
You received this message because you are subscribed to the Google Groups "spec-mentors" group.
To unsubscribe from this group and stop receiving emails from it, send an email to spec-mentors...@chromium.org.
To view this discussion visit https://groups.google.com/a/chromium.org/d/msgid/spec-mentors/CAJnPROx%2Bjr1KdAe7-X_aiMibT%3D-MBaJ7hyN%3D%2Be2d3Je-KBBm7g%40mail.gmail.com.
For more options, visit https://groups.google.com/a/chromium.org/d/optout.
Reply all
Reply to author
Forward
0 new messages