Things I've worked on
Ten years, two browsers, one spec, and a few weekend tools. Almost all of it happened in public, so most of it is linked.
firefox chrome standards personal
2025 NOW
AI security in the browser What it means for a browser to act on your behalf without becoming a liability. Current work at Chrome. POST Securing Gemini in Chrome
2023 NOW
Editor of the Cookies spec, IETF Writing down how cookies actually work, so the next twenty years of the web can rely on it. REPO httpbis/rfc6265bis SPEC Current draft
2022
Privacy Sandbox Replacing cross-site tracking with something the whole platform can agree on. Argued mostly in the open. REPO Explainers POST Why we built it this way
2020
Permission prompts · third-party cookies Two years of deciding what a website may ask for, and what it gets to remember. AWARD Innovation award, cookie blocking POST Total Cookie Protection
2019
Removing EV and insecure-HTTP indicators Took two padlocks out of the URL bar. People had opinions about one of them. POST Why we removed EV
2017
also
Weekend things, small and mostly finished. REPO diffconf REPO plaintext