"A Hipster History of CORS" by Devdatta Akhawe (Strange Loop 2022)

Devdatta Akhawe explains the history of the Same-Origin Policy and how CORS was designed to securely enable cross-origin web requests.

CORS makes no sense when you first look at it. The only way it does is if you understand the history of how we got here; this talk will go through the history of the web and CORS and how we ended up designing something like this. If you have always been confused by CORS, you will find this talk useful. We will also cover modern cross origin standards (corp, corp, corb, coop, coep, oh my) and how they can help securely design modern web applications. Devdatta Akhawe Director of Security, Figma @frgx Dev works at Figma, as part of the Figma Security team. Before that he spent nearly 6 years at Dropbox in various roles in the Dropbox Security team. He joined Dropbox after his PhD in Computer Science at UC Berkeley, where his research focused on web and browser security. He is also an editor on the Sub Resource Integrity specification. Other details, including how to really pronounce his name are at devd.me -------- Sponsored by: -------- Stream is the # 1 Chat API for custom messaging apps. Activate your free 30-day trial to explore Stream Chat. gstrm.io/tsl