bug-gnuzilla
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Bug-gnuzilla] dom.storage is disabled by default in Icecat


From: Francois Marier
Subject: [Bug-gnuzilla] dom.storage is disabled by default in Icecat
Date: Sat, 1 Jun 2013 16:54:00 -0400

I was trying to make Persona (the privacy-respecting decentralised
login system -- https://login.persona.org) work with Icecat and ran
into two issues:

1. its JavaScript is disabled by LibreJS
2. dom.storage (i.e. localStorage and sessionStorage) is disabled by default

For #1, I have started patching Persona to make the licensing info
conform to what LibreJS expects. This should resolve that problem.

However, #2 is a blocker. May I ask why that feature is disabled? I
mean, that's like disabling cookies entirely. It breaks the web in a
big way. In the case of Persona, localStorage is used to store private
keys so that we can do the crypto client-side and not have to trust
the server with these keys. It is a necessary component of our privacy
guarantees.

I can understand that localStorage, like cookies, is a way to store
tracking data in the browser, which is undesirable. However, clearing
cookies also clears localStorage, so privacy-conscious users who set
their browser to automatically clear cookies when the browser shuts
down will be fine. There's essentially no difference between allowing
cookies and allowing local storage from a privacy point of view.

Francois



reply via email to

[Prev in Thread] Current Thread [Next in Thread]