Thanks for the report. As part of our privacy work, we're aiming to increasingly limit (and eventually limit) the Web Compat heuristics discussed above, which should help protect against this attack. Broadly speaking, we think this work is very interesting, but aren't yet convinced that it's practical enough to warrant significant investments in mitigations at the expense of other privacy and security workstreams. We look forward to reading about further developments.
Bug 1749129 Comment 19 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
Thanks for the report. As part of our privacy work, we're aiming to increasingly limit (and eventually eliminate) the Web Compat heuristics discussed above, which should help protect against this attack. Broadly speaking, we think this work is very interesting, but aren't yet convinced that it's practical enough to warrant significant investments in mitigations at the expense of other privacy and security workstreams. We look forward to reading about further developments.