News for hackers. Stuff that matters.

A comment on Firefox 91 introduces enhanced cookie clearing. Parent comment

Re:Firefox 91 introduces enhanced cookie clearing by xorcist on Tuesday August 10, 2021 @07:47PM (#28136239)
This sounds like cookies should have worked from the start.

I suspect this is going to help against some CSRF as well?

[ Parent | on HN ]
Re:Firefox 91 introduces enhanced cookie clearing by jefftk on Tuesday August 10, 2021 @10:33PM (#28137265)
How would this help with CSRF? The new feature only applies when someone intentionally clears their cookies.
[ Parent | on HN ]
Re:Firefox 91 introduces enhanced cookie clearing by Terretta on Tuesday August 10, 2021 @11:19PM (#28137558)
Not how I read it. To me it says Facebook.com cookies set through site A are separate from those stored through site B. Even if you never clear, fb cookies would no longer be a single cookie to link these, but separate.

The jar is the key new thing, not the emptying.

[ Parent | on HN ]
Re:Firefox 91 introduces enhanced cookie clearing by jefftk on Tuesday August 10, 2021 @11:41PM (#28137725)
The approach to the cookie jar isn't new in Firefox 91; that's Total Cookie Protection, added in Firefox 86: https://blog.mozilla.org/security/2021/02/23/total-cookie-pr...
[ Parent | on HN ]
Re:Firefox 91 introduces enhanced cookie clearing by Terretta on Wednesday August 11, 2021 @10:09PM (#28150822)
Delete the word “new”, emphasis on “key”.
[ Parent | on HN ]