Strange Loop Conference | "A Hipster History of CORS" by Devdatta Akhawe (Strange Loop 2022) @StrangeLoopConf | Uploaded October 2022 | Updated October 2024, 1 week ago.
CORS makes no sense when you first look at it. The only way it does is if you understand the history of how we got here; this talk will go through the history of the web and CORS and how we ended up designing something like this. If you have always been confused by CORS, you will find this talk useful. We will also cover modern cross origin standards (corp, corp, corb, coop, coep, oh my) and how they can help securely design modern web applications.
Devdatta Akhawe
Director of Security, Figma
@frgx
Dev works at Figma, as part of the Figma Security team. Before that he spent nearly 6 years at Dropbox in various roles in the Dropbox Security team. He joined Dropbox after his PhD in Computer Science at UC Berkeley, where his research focused on web and browser security. He is also an editor on the Sub Resource Integrity specification. Other details, including how to really pronounce his name are at devd.me
-------- Sponsored by: --------
Stream is the # 1 Chat API for custom messaging apps. Activate your free 30-day trial to explore Stream Chat. gstrm.io/tsl
CORS makes no sense when you first look at it. The only way it does is if you understand the history of how we got here; this talk will go through the history of the web and CORS and how we ended up designing something like this. If you have always been confused by CORS, you will find this talk useful. We will also cover modern cross origin standards (corp, corp, corb, coop, coep, oh my) and how they can help securely design modern web applications.
Devdatta Akhawe
Director of Security, Figma
@frgx
Dev works at Figma, as part of the Figma Security team. Before that he spent nearly 6 years at Dropbox in various roles in the Dropbox Security team. He joined Dropbox after his PhD in Computer Science at UC Berkeley, where his research focused on web and browser security. He is also an editor on the Sub Resource Integrity specification. Other details, including how to really pronounce his name are at devd.me
-------- Sponsored by: --------
Stream is the # 1 Chat API for custom messaging apps. Activate your free 30-day trial to explore Stream Chat. gstrm.io/tsl
