What purpose does a redemption record serve?
martinthomson opened this issue · 1 comments
These are made to sound like cookies, but they have a whole set of parallel machinery associated with them. This machinery is quite complex, so I would have expected strong justification, but there is not a lot said about it.
From the Origin Trial that we ran in Chrome, we heard from developers that it was useful to be able to redeem single tokens per top-level origin (and for the implementer, to enforce limits across all the non-isolated third parties on that page), this necessitates a way to pass around the result of the redemption to the various parties that might need the results. However there's not a great way to do this with cookies since you'd need specialized client-side code to pass the redemption response into the various embedded content/parties which is why we decided to have this simpler storage solution that can just be written/read through the PST API by the various parties.