3 ms·
We already have this with (iirc) postMessage API.
by junon 2y ago
We already have this with (iirc) postMessage API.
- lxgr 2y agoThat API is exactly one of the reasons Safari still runs some distinct origin sites in the same process together. Performantly implementing that API across processes is possible, but not quite trivial.
- brucehoult 2y agopopup-based authentication does not actually need high performance.
- lxgr 2y agoIt's not used only for authentication, and figuring out what a website is trying to do heuristically doesn't sound easy either (although I believe Chrome on Android does just that, and enforces a site-locked process when they deem it important for security reasons).