Add requirement to only be enabled in secure context

keks24 · Jun 21, 2023 · 25aaa65 · 25aaa65
1 parent b8a049e
commit 25aaa65
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/docs/spec.bs b/docs/spec.bs
@@ -131,6 +131,11 @@ stores state in the [=Integrity verdict=] that can be used for cross site tracki
 
 ## Security considerations ## {#security}
 
+### Secure context only ### {#security-secure-context}
+
+Web environment integrity MUST only be enabled in a [=secure context=]. This is to ensure that the
+website is not spoofed.
+
 <i>Todo</i>
 
 ## Privacy considerations ## {#privacy}