Juho Forsén

@esarafianou do you have a good understanding of the current state of HTTP cache behaviors around different header configurations? My knowledge is outdated, I'd have to look it up.

@agnivade opening a PR with this change is fine, but it should go through some quick security testing before merging

@enahum @esarafianou how much of a priority is this? 9.6 feature complete is in two weeks, is that what we're aiming for?

The `createChannelBookmark` endpoint allows specifying a user-defined ID for your new bookmark and `PreSave` only generates a new ID if there isn't one yet. That doesn't seem intentional?

> The overall idea assumes that we have a Page Integrity-like plugin who verifies that, for a given domain, only signed/known pages are rendered in the browser (something Page Integrity...

> We could make a less "strong" model, that would be: if the page isn't signed, it is rendered but with javascript disabled? There is an extension API to disable...