Thomas Steiner (@tomayac)

Now at

The below is an off-site archive of all tweets posted by @tomayac ever

June 27th, 2020

@jho_crypto Yepp, happy this tip helped. 😃 If you want to (or can) share what you’re working on, I’d be curious to have a look.

via Twitter for iPhone in reply to jho_crypto

@firt Yes, I was more focusing on what this entitlement entitles you to do. Service workers, caching,… maybe even something else?

via Twitter for iPhone in reply to firt

Improving HTTP with structured header fields, by @mnot:

via Echofon

@nekrtemplar @firt FWIW, I looked into Facebook’s Android WebView, which is marked as debuggable now: It seemed clean when I tested, at least when it comes to injected JavaScript.

via Echofon

@firt Great digging, thanks. Only catching up now. Weird that the blog post wouldn’t mention service workers. Also still no details on thcom.appleOs.developer.web-browser entitlement. Altogether sounds like a promising step in the right di

via Echofon in reply to firt

@_alastair @firt @othermaciej The big question mark are still the entitlement details: nothing much to be found right now apart from the @WebKit blog post and @firt’s thread: The entitlements documentation still doesn’t mentio

via Echofon

RT @johnwilander: App-bound domains — a new way to restrict potentially privacy-invasive WebView APIs to web content from a specific set of…

via Echofon

@jho_crypto The API was renamed: You can’t really get frame-accuracy, but check the presentationTime in the metadata:

via Twitter for iPhone