3 ms·
You just need to run it in a process without any secret data from other origins or the browser/system. That seems feasible without significant performance loss
by devit 9y ago
You just need to run it in a process without any secret data from other origins or the browser/system.
That seems feasible without significant performance loss in most cases.
There is still a fingerprinting issue though that might not be possible to fully remove without huge performance cost.
- contrarian_ 9y agoProcess isolation does not prevent Spectre. In theory, you can carry out Spectre over the network.
- pcwalton 9y agoThat's what Site Isolation is, but it has significant drawbacks: it cannot always protect against cross origin cookie leakage, and pages can have a lot more cross domain iframes than a reasonable process limit can account for.