BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Sabre//Sabre VObject 4.5.8//EN
CALSCALE:GREGORIAN
LAST-MODIFIED:20241016T221854Z
BEGIN:VTIMEZONE
TZID:America/Los_Angeles
X-MICROSOFT-CDO-TZID:13
BEGIN:STANDARD
DTSTART:20231105T090000
TZOFFSETFROM:-0700
TZOFFSETTO:-0800
TZNAME:PST
END:STANDARD
BEGIN:STANDARD
DTSTART:20241103T090000
TZOFFSETFROM:-0700
TZOFFSETTO:-0800
TZNAME:PST
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20240310T100000
TZOFFSETFROM:-0800
TZOFFSETTO:-0700
TZNAME:PDT
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:a5c86bfb-b4b3-4e4a-bdeb-07cd2df18085
DTSTAMP:20241016T221854Z
SUMMARY:Prompt spam and reputation attacks associated with requestStorageAc
 cessFor
DTSTART;TZID=America/Los_Angeles:20240925T160000
DTEND;TZID=America/Los_Angeles:20240925T164500
DESCRIPTION:https://www.w3.org/events/meetings/a5c86bfb-b4b3-4e4a-bdeb-07cd
 2df18085/\n\nDiscussion on how to expand the requestStorageAccessFor API t
 o reduce the potential for it to be used as a vector for reputation attack
 s and prompt spam.\n\nThese are issues because embedded sites can not cont
 rol who embeds them. Which means that the top level site can prompt on beh
 alf of the embedded site. This could potentially [damage](https://github.c
 om/WebKit/standards-positions/issues/125#issuecomment-1422944814) the embe
 dder’s reputation and/or spam the user with the generation of a large nu
 mber of prompts.\n\nAgenda\n\n**Chairs:**\nAaron Selya\, Chris Fredrickson
 \n\n**Description:**\nDiscussion on how to expand the requestStorageAccess
 For API to reduce the potential for it to be used as a vector for reputati
 on attacks and prompt spam.\n\nThese are issues because embedded sites can
  not control who embeds them. Which means that the top level site can prom
 pt on behalf of the embedded site. This could potentially [damage](https:/
 /github.com/WebKit/standards-positions/issues/125#issuecomment-1422944814)
  the embedder’s reputation and/or spam the user with the generation of a
  large number of prompts.\n\n**Goal(s):**\ngather input from the community
  and gain consensus on how to address the problems\n\n\n**Agenda:**\nIntro
 duce the problem\nReview how the browsers have addressed it so far\nDiscus
 s more potential  solutions\n\n**Materials:**\n- [slides](https://www.w3.o
 rg/2024/Talks/TPAC/breakouts/requestStorageAccessFor.pdf)\n- [minutes](htt
 ps://www.w3.org/2024/09/rsafor-20240925.html)\n- [Session proposal on GitH
 ub](https://github.com/w3c/tpac2024-breakouts/issues/75)
STATUS:CONFIRMED
CREATED:20240916T215930Z
LAST-MODIFIED:20241016T221854Z
SEQUENCE:1
ORGANIZER;CN=W3C Calendar;PARTSTAT=ACCEPTED;ROLE=NON-PARTICIPANT:mailto:nor
 eply@w3.org
LOCATION:4 Concourse Level - Redondo
CATEGORIES:TPAC 2024,Breakout Sessions
END:VEVENT
END:VCALENDAR