← Back to release summary

Local network access restrictions for WebTransport

Category
Security
Type
New or changed feature
Status
Proposed (Chrome Proposed)
Intent stage
None

Summary

Restricts the ability to make requests to the user's local network using WebTransport, gated behind a permission prompt. A local network request is any request from a public website to a local IP address or loopback, or from a local website (e.g. intranet) to loopback. Gating the ability for websites to perform these requests behind a permission reduces the ability of sites to use these requests to fingerprint the user's local network. This permission is restricted to secure contexts. This work is adding to the Local Network Access Restrictions work here: https://chromestatus.com/feature/5152728072060928

Motivation

Local WebTransport connections are subject to many of the same attacks that the original LNA proposal are designed to solve. This would add the same controls that were implemented in the original LNA proposal to WebTransport

Standards & signals

Samples: https://lna-testing.notyetsecure.com

Explainers: https://github.com/WICG/local-network-access/blob/main/explainer.md

View on chromestatus.com