Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Ideas -

if all it takes to block is adding header `permissions-policy: interest-cohort=()

1. Github has all those bots that suggest security improvements to your code - maybe they should also suggest privacy improvements to your code.

2. Governmental sites should be changed to always require this.

3. How about a plugin that when it gets a site without the header informs user via colored tab or similar solution. I suppose Google would try to remove it from add-ons, but then that would be fuel for the inevitable lawsuits complaining this whole thing was anti-competitive and monopolistic behavior on Google's part.



There are also tools that check your HTTP headers. While securityheaders checks for Permission-Policy being used, I can imagine it will be improved to check for the "interest-cohort" value in the future.

- https://securityheaders.com

- https://observatory.mozilla.org




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: