News for hackers. Stuff that matters.

A comment on The CNAME of the Game: Large-scale Analysis of DNS-based Tracking Evasion. Parent comment

Re:The CNAME of the Game: Large-scale Analysis of DNS-based ... by volderette on Friday March 05, 2021 @12:15AM (#26353024)
Nope, not super screwed at all. Safari even limits http cookies if the cname doesnt match.

„On Safari 14 (requires Big Sur) and on all major iOS and iPadOS 14.2+ browser apps, expiration of cookies set with Set-Cookie HTTP response headers is 7 days at most, if the response originates from a subdomain that has a CNAME alias to a cross-site origin“

https://www.cookiestatus.com/

[ Parent | on HN ]
Re:The CNAME of the Game: Large-scale Analysis of DNS-based ... by Krisando on Friday March 05, 2021 @05:56AM (#26355401)
You should read the paper, it literally discusses how they were getting around that and discovered vulnerabilities because of it.
[ Parent | on HN ]