News for hackers. Stuff that matters.

A comment on Firefox to Block All 3rd Party Trackers by Default. Parent comment

Re:Firefox to Block All 3rd Party Trackers by Default by michaelt on Friday February 22, 2019 @06:26AM (#19224505)
Eh, single-sign-on is easily fixed for most applications; just forward the entire window to the SSO provider, so the cookies are first-party, then forward back once they're logged in.
[ Parent | on HN ]
Re:Firefox to Block All 3rd Party Trackers by Default by kevlened on Friday February 22, 2019 @08:53PM (#19231069)
I wish it was that simple.

If you can bounce through an SSO provider to set a first-party cookie, you can bounce through an ad tracker. Even with a heuristic that requires action on the interstitial, how do you distinguish between redirects to services like Google that support social login and ad tracking?

Separating SSO and ad tracking is nontrivial and may result in collateral damage.

[ Parent | on HN ]