Conversation

Suggestion: encourage sites to defend against Spectre and other client-side vulnerabilities via cross-origin isolation: Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Nice posts about it at web.dev/coop-coep/ and web.dev/cross-origin-i.
1
2