Re:Firefox 91 introduces enhanced cookie clearing
by jefftk on Tuesday August 10, 2021 @10:33PM
(#28137265)
How would this help with CSRF? The new feature only applies when someone intentionally clears their cookies.
[ Parent
| on HN ]
Re:Firefox 91 introduces enhanced cookie clearing
by Terretta on Tuesday August 10, 2021 @11:19PM
(#28137558)
Not how I read it. To me it says Facebook.com cookies set through site A are separate from those stored through site B. Even if you never clear, fb cookies would no longer be a single cookie to link these, but separate.
The jar is the key new thing, not the emptying.
Re:Firefox 91 introduces enhanced cookie clearing
by jefftk on Tuesday August 10, 2021 @11:41PM
(#28137725)
The approach to the cookie jar isn't new in Firefox 91;
that's Total Cookie Protection, added in Firefox 86: https://blog.mozilla.org/security/2021/02/23/total-cookie-pr...