Re:Get Ready for New SameSite=None; Secure Cookie Settings
by throwaway07Ju19 on Wednesday October 23, 2019 @05:02PM
(#21338981)
My website has one affiliate link to Amazon page and a PayPal Buy It Now button (implemented as a form). Chrome's console message suggests I add 'SameSite=None' and 'Secure'. Any advice on where I would add those properties and if they are the right value for these type of links? I didn't realize these type of links had anything to do with cookies.
[ Parent
| on HN ]
Re:Get Ready for New SameSite=None; Secure Cookie Settings
by hn_throwaway_99 on Wednesday October 23, 2019 @06:23PM
(#21339707)
Maybe I'm misunderstanding, but isn't the whole point that Amazon and PayPal need to update their cookies if they intend for these affiliate/pay now links to their domain to pass along their own cookies?
Re:Get Ready for New SameSite=None; Secure Cookie Settings
by yoloClin on Wednesday October 23, 2019 @07:53PM
(#21340271)
I don't know how AWS and Paypal affiliate links work and if they even send a cookie, or if they just send to a URL with your account ID embedded in the link. You could probably check by using the 'Network' tab in your browsers developer tools, or as other have suggested newer versions of chrome allow testing of this feature.
If there are any cookies, you will need to add SameSite=none or similar to the Set-Cookie directives for the cookies which are intended to be shared cross-domain.