WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
Coffee With Developers • Aug 31, 2026

What is Cross-Origin Storage - Thomas Steiner

Thomas Steiner

Thomas Steiner proves shared browser caching isn't dead. Discover how the Cross-Origin Storage API securely shares massive web AI models across domains without triggering privacy-compromising timing attacks.

Pause
Mute Enter Fullscreen
#1 about 3 min

Overcoming historical web caching and privacy challenges

How partitioned browser caches broke shared content delivery networks to prevent timing attacks.

#2 about 3 min

Solving storage constraints for web AI and fonts

Why large assets like local AI models and comprehensive emoji fonts require a new caching mechanism.

#3 about 2 min

Addressing shared web resources by content hash

Using content-addressed storage to verify and share resources regardless of their original download URL.

#4 about 3 min

Managing sharing levels with the imperative API

How to use JavaScript to query the cache and configure global, same-site, or origin-specific sharing.

#5 about 2 min

Opting into shared caching with declarative HTML attributes

Adding specific attributes to script and link tags enables seamless integration with cross-origin storage.

#6 about 4 min

Preventing malware distribution through decentralized hash verification

Validating incoming bytes against known hashes stops compromised domains from serving malicious code.

#7 about 3 min

Understanding underlying browser storage implementations and tooling

How browser vendors might adapt existing mechanisms like IndexedDB or OPFS to store cached blobs.

#8 about 4 min

Mitigating timing attacks and managing storage quotas

Protecting user privacy by enforcing popularity thresholds and probe limits on cached resources.

#9 about 3 min

Expanding ecosystem adoption across WebAssembly and AI frameworks

How partners use the API to share complex dependencies like Skia rendering engines and compiled database libraries.

#10 about 2 min

Testing the proposed API using browser extension polyfills

Developers can experiment with the cross-origin storage proposal immediately using offscreen page service workers.

#11 about 3 min

Integrating storage across CSS and Fetch API endpoints

Modifying standard request options allows developers to cache assets through font-face declarations and network requests.

#12 about 6 min

Providing usage metrics to support browser vendor implementation

Expressing developer interest with concrete metrics helps prioritize the API standardization process.

#13 about 2 min

Integrating shared caching with modern web framework bundlers

Using plugins for tools like Vite enables frameworks to optimize resource delivery natively.

Matching moments

2:53 min

Solving cross-origin model size and native performance limitations

Christian Liebel Christian Liebel · World Congress 2025

2:44 min

Introduction to web acceleration and caching paradigms

Thijs Feryn Thijs Feryn · World Congress 2025

2:57 min

Managing local storage footprints for progressive browser AI systems

Chris Heilmann Chris Heilmann +2 · LIVE

2:46 min

Querying cold storage directly from the browser

Thorsten Riess Thorsten Riess · Europe 2026 Virtual

6:38 min

Improving asset caching through localized font deployments

Chris Heilmann Chris Heilmann +2 · LIVE

4:54 min

The origins and design principles of WebAssembly

Maurice Brinkmann · World Congress 2023

More from Coffee With Developers

Using Agents to Curate the Content You See Online - Dan Gish thumbnail
12:47
28 days ago

Using Agents to Curate the Content You See Online - Dan Gish

Dan Gish

AI Vector Search at Scale - Ewa Szyszka - Ewa Szyszka thumbnail
11:14
28 days ago

AI Vector Search at Scale - Ewa Szyszka - Ewa Szyszka

Ewa Szyszka

Women in AI - Nalini Garg thumbnail
42:19
29 days ago

Women in AI - Nalini Garg

Nalini Garg

Agents and People Dynamics in Shared Chats - Sam Liu thumbnail
37:41
about 1 month ago

Agents and People Dynamics in Shared Chats - Sam Liu

Sam Liu

Why Token Reduction Isn’t Cost Reduction - Dave Anderson & Sarel Weinberger, PhD. thumbnail
41:09
about 1 month ago

Why Token Reduction Isn’t Cost Reduction - Dave Anderson & Sarel Weinberger, PhD.

Dave Anderson, Sarel Weinberger, Phd

Validating Real-World Usefulness of AI Models - Julia Kasper thumbnail
22:00
about 1 month ago

Validating Real-World Usefulness of AI Models - Julia Kasper

Julia Kasper

Related videos

WebAssembly Revolution: Elevating JavaScript's Reach and Performance thumbnail
30:57
World Congress 2024 • about 2 years ago

WebAssembly Revolution: Elevating JavaScript's Reach and Performance

Önder Ceylan

Exploring the Future of Web AI with Google thumbnail
33:51
Coffee With Developers • over 1 year ago

Exploring the Future of Web AI with Google

Thomas Steiner

WeAreDevelopers LIVE – From JavaScript to WebAssembly, High-Performance Charting and More thumbnail
1:09:56
LIVE • 8 months ago

WeAreDevelopers LIVE – From JavaScript to WebAssembly, High-Performance Charting and More

Chris Heilmann, Daniel Cranney, Andrew Burnett-Thompson, David Burleigh

WeAreDevelopers LIVE - Speeding up with WebGPU thumbnail
57:38
LIVE • 5 months ago

WeAreDevelopers LIVE - Speeding up with WebGPU

Chris Heilmann, Daniel Cranney, Sylwia Laskowska

New Browser APIs, End of React Create App, Smuggling Data in Emoji and more with Rowdy Rabouw thumbnail
1:13:35
LIVE • over 1 year ago

New Browser APIs, End of React Create App, Smuggling Data in Emoji and more with Rowdy Rabouw

Chris Heilmann, Daniel Cranney, Rowdy Rabouw

WeAreDevelopers LIVE - The Shape of SVG to Come! thumbnail
59:56
LIVE • 3 months ago

WeAreDevelopers LIVE - The Shape of SVG to Come!

Chris Heilmann, Daniel Cranney, Lionel Péramo

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.