News for hackers. Stuff that matters.

A comment on Full third-party cookie blocking and more. Parent comment

Re:Full third-party cookie blocking and more by dfabulich on Tuesday March 24, 2020 @05:28PM (#22679220)
1st party httponly secure cookies will be erased in seven days.

You need the user to manually provide an identifier (i.e. login) to avoid losing everything.

The user's password safe is now the only non-volatile storage mechanism on Safari.

[ Parent | on HN ]
Re:Full third-party cookie blocking and more by shakna on Tuesday March 24, 2020 @09:44PM (#22681211)
> 1st party httponly secure cookies will be erased in seven days.

httponly cookies can't be set from JS, and the seven day erasure only applies to cookies set from JS. That's why they're the recommended method for keeping a user logged in.

[ Parent | on HN ]
Re:Full third-party cookie blocking and more by johncolanduoni on Tuesday March 24, 2020 @06:10PM (#22679613)
They explicitly say 1st party httponly secure cookies are exempt and are their first recommended alternative.
[ Parent | on HN ]