Feature-Policy security header for the whonix.org website

Website
1

Feature-Policy is deprecated and replaced with Permissions Policy:

1 Like
2

Similar to Whonix website security rating - "B" (Mozilla Observatory) - Content Security Policy (CSP) - #21 by Patrick.

Browsers don’t support permission policy yet and there’s no documentation (that I understand with reasonable time spent) on how to use it.

Quote Permissions-Policy - HTTP | MDN

Feature-Policy

Experimental

This is an experimental technology
Check the Browser compatibility table carefully before using this in production.

Warning

The header has now been renamed to Permissions-Policy in the spec, and this article will eventually be updated to reflect that change.

Once that changes, I will look into it. Waiting for major browser supporting and documenting that such as Mozilla MDN.

1 Like
3

Similar to COEP COOP CORP CORS CORB security headers for whonix.org.

1 Like
4

looks working good on main website and forums.

Patrick via Whonix Forum:

1 Like
5

Its better for the community privacy to de-list whonix from floc tracking list.

1 Like
6

Was already enabled.

interest-cohort=()

is visible on

1 Like
7

Nice!, didnt notice it just now.

1 Like