News for hackers. Stuff that matters.

A comment on Promiscuous cookies and their impending death via the SameSite policy. Parent comment

Re:Promiscuous cookies and their impending death via the Sam... by Buge on Saturday January 04, 2020 @11:53PM (#21959714)
Why None instead of Lax? The uses cases you mentioned for the None cookie seem like they would still work with a Lax cookie.
[ Parent | on HN ]
Re:Promiscuous cookies and their impending death via the Sam... by jacobparker on Sunday January 05, 2020 @02:18AM (#21960136)
Ah, good point. So it depends on your site. Some sites need to do things like serve embeddable content or be an OAuth identity provider, etc., and SameSite=None is required in those cases. Sorry for not being more clear about that.
[ Parent | on HN ]