News for hackers. Stuff that matters.
Re:Total Cookie Protection by andrewmcwatters on Wednesday February 24, 2021 @04:32PM (#26256317)
My point is you can make these arguments all day. Why do we allow iframes? You could argue web servers should simply communicate among themselves and serve subdocuments to clients.

Why is HTTP/2 Server Push being rescinded?

Why do user agents not provide additional types for <script> based on runtime installations?

Why isn't there a renderer API that allows me to use painted trees in <canvas>, but there is a bluetooth API that no one uses?

Re:Total Cookie Protection by arendtio on Thursday February 25, 2021 @12:47PM (#26265665)
I am not sure if I get your point then. I think it is important to see the patterns of bad decisions in the past to improve decision making in the future.

That those mistakes were not done deliberately and with good intentions is a completely different story and that in hindsight everything looks so clear is also well known ;-)