Consider making permission defaults * instead of self

[arichiv]

Not asking for review of this yet, but posting here for consideration as part of #106

---

Preview | Diff

[anderagakura]

Trying to understand the blink discussion, the Issue 990 design revue in w3ctag and the privacy side :

• In case of the user denies giving consent to X vendors / tech via the CMP (Consent Management Platform), will the token be shared cross site if a wildcard is set anyway? The question also works with the Global privacy control
• Is there a way to prevent any adtech to redeem the token to display an ads anywhere outside? (But I think this question is already in the blink discussion)
• Not related but somehow related, if the token is considered First party tracking (Potential risk noted in the spec) then combined with the wildcard, you have a cross site tracking : How to prevent that?

[arichiv]

I replied in the blink-dev thread: https://groups.google.com/a/chromium.org/g/blink-dev/c/5jI8kLLdIFw/

[fwadnjar142]

On Tue, Nov 5, 2024 at 3:55 PM 'Theodore Olsauskas-Warren' via blink-api-owners-discuss < [email protected] > wrote:

Hi Blink API Owners,

I'm reaching out in regards to the Private
State Tokens permission policy change I2P&S that was sent to blink-dev.

I don't see any unactioned feedback or outstanding questions on the
thread, and so I believe we are now blocked on API owner LGTMs.

Hoping this email serves as the trigger for you all to take another look.

Theo.

--

Theodore Olsauskas-Warren

Software Engineer

[email protected]

--
You received this message because you are subscribed to the Google Groups
"blink-api-owners-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to [email protected].
To view this discussion visit https://groups.google.com/a/chromium.org/d/msgid/blink-api-owners-discuss/CA%2B0Xr7_R4TNO9OFpC26m-sA9mWabLZUsZKinhrkMBJid6qgG0w%40mail.gmail.com
.

--
You received this message because you are subscribed to the Google Groups "blink-api-owners-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/chromium.org/d/msgid/blink-api-owners-discuss/CA%2BN6QZsXkZYTEAz_%3Da%2BWbwMxEzokuLMBGsWwG%3DWy_ToJrJr6gQ%40mail.gmail.com.