If your threat model now requires a browser in the chain, then we can fix it in the browser, no? https://blog.mozilla.org/security/2018/01/03/mitigations-landi

If your threat model now requires a browser in the chain, then we can fix it in the browser, no? https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/ https://blog.mozilla.org/security/2018/01/03/mitigations-lan... https://security.googleblog.com/2018/07/mitigating-spectre-with-site-isolation.html https://security.googleblog.com/2018/07/mitigating-spectre-w... Still safe at full CPU perf.