News for hackers. Stuff that matters.
Re:Total Cookie Protection by zaarn on Wednesday February 24, 2021 @06:35AM (#26248892)
A lot of IDPs break. For example any website that presents "Login with Google" will not work or require a reload after completing the Auth flow before the login is accepted.

This isn't simply "blocking third party cookies", it's "even an iframe has no access to the other state partition". The third party cookie is allowed to exist but it cannot leak to other sites. However, this leak prevention breaks plenty of other things if one is not careful (Mozilla was, there is a heuristic).

There are no comments on this comment yet.