WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
Coffee With Developers β€’ Aug 31, 2026

What is Cross-Origin Storage - Thomas Steiner

Thomas Steiner

Thomas Steiner proves shared browser caching isn't dead. Discover how the Cross-Origin Storage API securely shares massive web AI models across domains without triggering privacy-compromising timing attacks.

Pause
Mute Enter Fullscreen
#1 about 3 min

Overcoming historical web caching and privacy challenges

How partitioned browser caches broke shared content delivery networks to prevent timing attacks.

#2 about 3 min

Solving storage constraints for web AI and fonts

Why large assets like local AI models and comprehensive emoji fonts require a new caching mechanism.

#3 about 2 min

Addressing shared web resources by content hash

Using content-addressed storage to verify and share resources regardless of their original download URL.

#4 about 3 min

Managing sharing levels with the imperative API

How to use JavaScript to query the cache and configure global, same-site, or origin-specific sharing.

#5 about 2 min

Opting into shared caching with declarative HTML attributes

Adding specific attributes to script and link tags enables seamless integration with cross-origin storage.

#6 about 4 min

Preventing malware distribution through decentralized hash verification

Validating incoming bytes against known hashes stops compromised domains from serving malicious code.

#7 about 3 min

Understanding underlying browser storage implementations and tooling

How browser vendors might adapt existing mechanisms like IndexedDB or OPFS to store cached blobs.

#8 about 4 min

Mitigating timing attacks and managing storage quotas

Protecting user privacy by enforcing popularity thresholds and probe limits on cached resources.

#9 about 3 min

Expanding ecosystem adoption across WebAssembly and AI frameworks

How partners use the API to share complex dependencies like Skia rendering engines and compiled database libraries.

#10 about 2 min

Testing the proposed API using browser extension polyfills

Developers can experiment with the cross-origin storage proposal immediately using offscreen page service workers.

#11 about 3 min

Integrating storage across CSS and Fetch API endpoints

Modifying standard request options allows developers to cache assets through font-face declarations and network requests.

#12 about 6 min

Providing usage metrics to support browser vendor implementation

Expressing developer interest with concrete metrics helps prioritize the API standardization process.

#13 about 2 min

Integrating shared caching with modern web framework bundlers

Using plugins for tools like Vite enables frameworks to optimize resource delivery natively.

Matching moments

2:53 min

Solving cross-origin model size and native performance limitations

Christian Liebel Christian Liebel Β· World Congress 2025

2:44 min

Introduction to web acceleration and caching paradigms

Thijs Feryn Thijs Feryn Β· World Congress 2025

2:57 min

Managing local storage footprints for progressive browser AI systems

Chris Heilmann Chris Heilmann +2 Β· LIVE

2:46 min

Querying cold storage directly from the browser

Thorsten Riess Thorsten Riess Β· Europe 2026 Virtual

3:06 min

Optimizing memory management and data processing with WebAssembly

Andrew Burnett-Thompson +1 Β· Coffee With Developers

6:38 min

Improving asset caching through localized font deployments

Chris Heilmann Chris Heilmann +2 Β· LIVE

More from Coffee With Developers

Using Agents to Curate the Content You See Online - Dan Gish thumbnail
12:47
about 2 months ago

Using Agents to Curate the Content You See Online - Dan Gish

Dan Gish

AI Vector Search at Scale - Ewa Szyszka - Ewa Szyszka thumbnail
11:14
about 2 months ago

AI Vector Search at Scale - Ewa Szyszka - Ewa Szyszka

Ewa Szyszka

Women in AI - Nalini Garg thumbnail
42:19
about 2 months ago

Women in AI - Nalini Garg

Nalini Garg

Agents and People Dynamics in Shared Chats - Sam Liu thumbnail
37:41
about 2 months ago

Agents and People Dynamics in Shared Chats - Sam Liu

Sam Liu

Why Token Reduction Isn’t Cost Reduction - Dave Anderson & Sarel Weinberger, PhD. thumbnail
41:09
2 months ago

Why Token Reduction Isn’t Cost Reduction - Dave Anderson & Sarel Weinberger, PhD.

Dave Anderson, Sarel Weinberger, Phd

Validating Real-World Usefulness of AI Models - Julia Kasper thumbnail
22:00
2 months ago

Validating Real-World Usefulness of AI Models - Julia Kasper

Julia Kasper

Upcoming sessions on this topic

Open session

Build a Zero-Cost AI Agent in Your Browser

  • Aishwarya Mathuria

    Adobe

    Computer Scientist

  • Nishant Thakur

    Adobe

    Senior Computer Scientist

Open session

Designing for Every Direction: Logical CSS for Global, Adaptive, and Effortlessly Reversible UIs

  • Vidhya Krishnamoorthy

    Morgan Stanley

    VP, Software Engineering Manager

Open session

Supply Chain Security for the Everyday Engineer

  • Pradumna Saraf

    Kestra Technologies

    Quality Assurance Engineer

Open session

Beyond File Dumps: Context Engineering for Coding Agents

  • Animesh Dutta

    Arm

    Senior Software Engineer

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Open session

Multi-Cloud Isn't a Project. It's a Side Effect.

  • Antonio Mendoza PΓ©rez

    Temporal Technologies

    Staff Developer Success Engineer

  • Gaurav Thadani

    Temporal

    Staff Developer Success Engineer

Related videos

WebAssembly Revolution: Elevating JavaScript's Reach and Performance thumbnail
30:57
World Congress 2024 β€’ about 2 years ago

WebAssembly Revolution: Elevating JavaScript's Reach and Performance

Γ–nder Ceylan

Exploring the Future of Web AI with Google thumbnail
33:51
Coffee With Developers β€’ over 1 year ago

Exploring the Future of Web AI with Google

Thomas Steiner

WeAreDevelopers LIVE – From JavaScript to WebAssembly, High-Performance Charting and More thumbnail
1:09:56
LIVE β€’ 9 months ago

WeAreDevelopers LIVE – From JavaScript to WebAssembly, High-Performance Charting and More

Chris Heilmann, Daniel Cranney, Andrew Burnett-Thompson, David Burleigh

WeAreDevelopers LIVE - Speeding up with WebGPU thumbnail
57:38
LIVE β€’ 6 months ago

WeAreDevelopers LIVE - Speeding up with WebGPU

Chris Heilmann, Daniel Cranney, Sylwia Laskowska

New Browser APIs, End of React Create App, Smuggling Data in Emoji and more with Rowdy Rabouw thumbnail
1:13:35
LIVE β€’ over 1 year ago

New Browser APIs, End of React Create App, Smuggling Data in Emoji and more with Rowdy Rabouw

Chris Heilmann, Daniel Cranney, Rowdy Rabouw

WeAreDevelopers LIVE - The Shape of SVG to Come! thumbnail
59:56
LIVE β€’ 4 months ago

WeAreDevelopers LIVE - The Shape of SVG to Come!

Chris Heilmann, Daniel Cranney, Lionel PΓ©ramo

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.