The pessimist in me thinks that if a browser were to disallow third party cookies, users might simply switch to a different browser that does allow them.
— Essentially off: Challenges only the most grievous offenders
— Low: Challenges only the most threatening visitors
— Medium: Challenges both moderate threat visitors and the most threatening visitors
— High: Challenges all visitors that have exhibited threatening behavior within the last 14 days
— I’m Under Attack!: Should only be used if your website is under a DDoS attack (Visitors will receive an interstitial page while we analyze their traffic and behavior to make sure they are a legitimate human visitor trying to access your website)
I think a lot of companies set it to "High" and forget about it, not realizing that it's ruining the experience for a lot of users.
[1]: https://www.cloudflare.com/a/firewall/ebelinski.com#security...
It's very good at blocking malicious traffic though and it's totally worth losing a pair of users for that.
That needs to bring everybody to the same table, Firefox will not do that alone and Google Chrome is not there for nothing.
Basically, Google must accept the proposal of disabling third-party cookies by default which will effect their income negatively, so they may just refuse to implement that feature for Chrome and even may prevent that feature from become a standard.
Sad.
Kinda hard to find though.
I make no claim that the above is a good idea. It is possible, but it strikes me there are unintended consequences that I won't think of.
I've been accused of being a bot before also.
It feels like Google is using me as a mechanical turk to solve their autonomous car rubbish, which will make them millions, and I have no choice but to do it, or I'm barred from the sites I need to access. It's profoundly despicable, as if I didn't hate Google enough already.
That explains why the majority of ReCaptchas I get are along the lines of "Click the squares that contain a street sign" or "Click the squares that contain a bicycle."
As much as I hate third party cookies, turning them on drastically simplifies the captcha solving process. So much so, I now use a separate browser profile with third party cookies allowed, just for the sake of captcha heavy sites.
Given that Google benefits by tracking my activities and free labor from my captcha solving, they will always punish privacy conscious users via such dark patterns.