Add a browsing context with name "_private"

[musically-ut]

Most browsers now have a private browsing mode, which offer similar features, i.e. browsing history is not recorded, cookies are not saved, localstorage is flushed when the context ends, and some other forms of isolation.

I think it would make sense to formalize such a browsing context and allow a webpage to specify that the target for an a link is _private, so that the page opens in private mode.

Does this make sense or are there better alternatives/previous proposals which deal with this?

Also, I am not sure which is the best venue/spec to approach for this; the HTML spec seems to be the most appropriate. If I am wrong, kindly guide me to the correct venue.

[annevk]

Could you run this proposal through the https://lists.w3.org/Archives/Public/public-webappsec/ mailing list perhaps? Similar things have been proposed, but nothing quite like this.

[annevk]

So while I think there's probably something here, I don't think we have the architecture sorted quite yet to enable this and the use cases to support it. Going to close this for now. Further work on isolation within the WebAppSec community might enable this one day.