New #blogpost: “Misinformation about Permissions Policy and FLoC”.

Lots of people have been spreading the often-unnecessary advice to add a Permissions-Policy response header to their sites, and some have been going so far as to ask FLOSS maintainers to patch their software to make this the default.

If you read the actual proposals and W3C specs, you’ll find a different story.

Everybody: please calm down, take a deep breath, and read before you make such prescriptive advice.

FLoC is terrible, but telling everyone to add a magic “opt-out header” in every situation conveys a misunderstanding of everything you need to know about the opt-in/out process.