This is infuriating. Google is once again severely hampering openness and accessibility in the name of security. The web is more than just the big CDNs. It is

This is infuriating. Google is once again severely hampering openness and accessibility in the name of security. The web is more than just the big CDNs. It is not all about your business model. If I can not use your browser to open a socket to a routable host and render the data, then it is not a web browser anymore. But I don't think Chrome has been one for awhile. Google's logical conclusion is to only allow you to connect to a whitelist of sites that they have control over. For that matter, domain names themselves are obsolete, we should just have AOL-style keywords like 'amazon' and 'facebook'. Only a poweruser weirdo would want to have their own website. Users could also be tricked into adding their own self signed certificates, or having their own private DNS. It would not at all surprise me if that is banned soon as well. I can't count the number of things that this would break, especial VPN accessible intranets. Having users register with some outside service for getting a private network SSL certificate is a no go. That is like saying that a platform is open because submitting to their app store is free. If I have to rely on an outside authority then it is no longer federated, and it is no longer the web. Which is fundamentally what they want. > It's kinda crazy that random websites can just send any HTTP request they want to your private network or local PC with no restrictions; that's a pretty huge attack surface to expose to the public internet. I don't think there will be any restrictions on what advertising and tracking CDNs a webpage can make requests to, so long as they have their certificates in order and are not on a private network. I'm sure that when I go to log into my bank it will still happily connect to 12+ different analytics services. I do think it would be nice to expose more control to the user for namespaces of what is allowed to be fetched from what context, but that might hamper advertising and content consumption.