Chromium Blog: Chrome 84 Beta: Web OTP, Web Animations, New Origin Trials and More

Chromium Blog

News and developments from the open source browser project

Chrome 84 Beta: Web OTP, Web Animations, New Origin Trials and More

Thursday, May 28, 2020

ChromeStatus.com Web OTP API

Verify phone numbers on the web with the Web OTP API Web AnimationsWeb Animations API improvements in Chromium 84

Origin TrialsOrigin Trials dashboardOrigin Trials Guide for Web Developers New Origin Trials Cookie Store APIexposes HTTP cookies to service workers Idle DetectionDetect inactive users with the Idle Detection API Origin IsolationOrigin isolationpostMessage()WebAssembly.Module WebAssembly SIMDexposes hardware SIMD instructions to WebAssembly Completed Origin Trials Content Indexing APIIndexing your offline-capable pages with the Content Indexing API Wake Lock API Based on PromisesWake Lock API has been updated with promises Other Features in this Release App shortcutsGet things done quickly with app shortcuts Autoupgrade Image Mixed Contentmixed image content will be upgraded to httpsis expected in a future release Blocking Insecure Downloads from Secure (HTTPS) ContextsProtecting users from insecure downloads in Google Chrome ReportingObserver on WorkersKnow your code health with the ReportingObserver API Resize Observer UpdatescontentBoxSizeborderBoxSizedevicePixelContentBoxSizeResizeObserverSizeResizeObserverdocument.onresize revert Keywordresets the style of an element Unprefixed Appearance CSS PropertyAn unprefixed version of -webkit-appearanceappearance Unprefixed ruby-position CSS Propertyruby-positionoverunderinter-character Web Authenticator API: Cross-origin iframe Supportweb authentication calls from cross-origin iframesWeb Authentication Level Two JavaScriptlist of recent features Private Methods and Accessorsshipped in Chrome 74methods and properties can also be private Weak referencesWeak references and finalizers Deprecations, and Removalscurrent deprecationsprevious removals @import rules in CSSStyleSheet.replace() Removedsheet.replace("@import('some.css');") This use case is being removedreplace()@import Remove TLS 1.0 and TLS 1.1

TLS 1.0 and 1.1 use MD5 and SHA-1, both weak hashes, in the transcript hash for the Finished message.

TLS 1.0 and 1.1 use MD5 and SHA-1 in the server signature. (Note: this is not the signature in the certificate.)

TLS 1.0 and 1.1 only support RC4 and CBC ciphers. RC4 is broken and has since been removed. TLS's CBC mode construction is flawed and is vulnerable to attacks.