Facebook Container Extension: Take control of how you’re being tracked

Re:Facebook Container Extension: Take control of how you’re ... by groovecoder on Tuesday March 27, 2018 @04:17PM (#16692334)

I really like that perspective! A few more high-profile cases like this and we just might nudge the internet in this direction! :)

[ Parent | on HN ]

Re:Facebook Container Extension: Take control of how you’re ... by scrollaway on Tuesday March 27, 2018 @04:46PM (#16692574)

Yes please. Third party cookies and the like are the plague. They have so few legitimate use cases.

Make it a long deprecation if you have to. Give even longer exemptions to the really big players / the big breakage / the legitimate use cases while we find better ways. But it is up to the browser vendors to remove the weapons here.

[ Parent | on HN ]

Re:Facebook Container Extension: Take control of how you’re ... by chopin on Wednesday March 28, 2018 @05:42AM (#16696533)

Unfortunately, OAuth relies on them. Many SaaS offerings rely on OAuth.

[ Parent | on HN ]

Re:Facebook Container Extension: Take control of how you’re ... by scrollaway on Wednesday March 28, 2018 @02:18PM (#16700302)

SAML and some oauth flavors do, but most of oauth does not.

[ Parent | on HN ]

Re:Facebook Container Extension: Take control of how you’re ... by rb12345 on Thursday March 29, 2018 @04:58PM (#16710962)

I don't think OAuth requires third-party cookies, and SAML definitely does not. The authentication parts use HTTP POSTs or redirects from the IdP to SP. You probably do want cookies to track the sessions on each end, but those would be first-party.

It's possible for your IdP to track the SPs you authenticate to regardless of protocol or cookie use, of course.

[ Parent | on HN ]