News for hackers. Stuff that matters.

A comment on Firefox rolls out Total Cookie Protection by default to all users. Parent comment

Re:Firefox rolls out Total Cookie Protection by default to a... by kayodelycaon on Tuesday June 14, 2022 @11:39AM (#31741081)
This feature protects domains, not sessions. SSO relies on passing tokens over redirects, not cookies. As long as your redirected, the SSO uses their own first party cookies. You would be logged in to the SSO provider no matter who redirected you there.
[ Parent | on HN ]

There are no comments on this comment yet.