There’s a New Privacy Safari API Coming Called Storage Access API

Last year at WWDC Apple introduced a Safari feature called Intelligent Tracking Prevention (ITP). It figures out which domains can track you across the web, and either separate the cookies or removes the data. Now there’s another privacy Safari API called Storage Access.

Storage Access

Apple says that the strongest developer feedback it got on ITP was that there should be a way for embedded cross-site content to authenticate users who are already logged into their first-party services.

There is a new Safari privacy API called Storage Access API.

Storage Access makes this a reality. It lets third-party embedded content to request access to first-party cookies only when the user interacts with them. Two functions have been added to cross-origin iframes: document.hasStorageAccess() and document.requestStorageAccess().

To prevent potential abuse, Apple will monitor the adoption of the API and make changes to it if there is widespread abuse since users won’t get a UI prompt when an inframe calls Storage Access.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.