News for hackers. Stuff that matters.
Re:Proposal: Treat FLoC as a security concern by livre on Sunday April 18, 2021 @10:36PM (#26858642)
Since you seem to work for Microsoft, the broken use case I know: without 3p cookies Microsoft Teams is broken (it shows a not very useful error page asking to refresh the page, when you do it shows the same error again). Many of us need it for remote work so I guess this one of the things Google had in mind when they delayed disabling 3p cookies by default.
Re:Proposal: Treat FLoC as a security concern by hirsin on Monday April 19, 2021 @11:35AM (#26863929)
Yes, Teams relies on silent auth from within an iframe (all those chat windows etc). This is impossible without 3p cookies, so we're working with Google to find a solution. Storage access API in Safari works, but sounds like it won't make it to Chrome.
Re:Proposal: Treat FLoC as a security concern by livre on Monday April 19, 2021 @06:25PM (#26868581)
Thanks, nice to know you are working on it.