4 ms·

Any problems? For example, CDNs are in different domains. Some ecommerce sites use payment services from other domains.

guelo 9y ago
Things will break like logging in with Google/Facebook/other OAuths that use popup window redirects, iframe services like Disqus or Facebook comments, Google's captcha will become more annoying, less local caching will happen which means slower browsing in general.
- mehrdadn 9y ago
  Yet another reason why you should avoid using service to log into another as much as possible.
  - ams6110 9y ago
    I'm really of two minds about this. On the one hand you can use Facebook or Google to log in and then have them know what sites you log into. Or you can use a site's native login and be pretty sure that at some point you're going to get a "we take security very seriously" notice after they screw up and expose all their user data.
    - mehrdadn 9y ago
      I don't really see how logging in with a different system prevents your user data from being exposed?
      - deleted 9y ago
        [deleted]
    - waterbomb0 9y ago
      If you use a password manager with different passwords for each site it doesn't matter (much). Either they steal your password (usually hashed), or your OAuth information. The minor difference is that with OAuth they cannot log-in to the site pretending to be you, but if they don't hash the passwords, or use weak method to do it, then it's possible. Regarding other user data stored in the DB (which is usually more valuable than just the passwords) there is no difference between the login method.
- saltcured 9y ago
  When you say login would break, what do you mean? Just that it would be less convenient, i.e. you have to login to your identity provider once for each first party? Or are you suggesting that the redirect flow for OpenID Connect or oauth wouldn't work at all?
loeg 9y ago
I've definitely run into problems with ecommerce sites (really just Tarsnap) and embedded iframes from 3rd party payment services, while using the Chrome equivalent of this Firefox setting.
- andai 9y ago
  How do you do this in Chrome?
  - mirthflat83 9y ago
    Using profiles I guess
  - loeg 9y ago
    chrome://flags/#enable-site-per-process Strict site isolation > Enable.
- cperciva 9y ago
  In case it's useful: This was due to a bug in Chrome which has since been fixed. (Chrome was losing the "POST" flag when sending a redirect message between processes.)
  - loeg 9y ago
    Any idea what version of Chrome fixed it? I refill my Tarsnap balance only occasionally.
    - cperciva 9y ago
      The bug was fixed on January 26th and was being merged to older supported branches expeditiously -- I don't know the exact version numbers but I'm sure that any releases they rolled after mid-February would have the fix.
      - loeg 9y ago
        I guess 65.0.3325.146 from March 5th probably works, then. Thanks!

Things will break like logging in with Google/Facebook/other OAuths that use popup window redirects, iframe services like Disqus or Facebook comments, Google's captcha will become more annoying, less local caching will happen which means slower browsing in general.

mehrdadn 9y ago
Yet another reason why you should avoid using service to log into another as much as possible.
- ams6110 9y ago
  I'm really of two minds about this. On the one hand you can use Facebook or Google to log in and then have them know what sites you log into. Or you can use a site's native login and be pretty sure that at some point you're going to get a "we take security very seriously" notice after they screw up and expose all their user data.
  - mehrdadn 9y ago
    I don't really see how logging in with a different system prevents your user data from being exposed?
    - deleted 9y ago
      [deleted]
  - waterbomb0 9y ago
    If you use a password manager with different passwords for each site it doesn't matter (much). Either they steal your password (usually hashed), or your OAuth information. The minor difference is that with OAuth they cannot log-in to the site pretending to be you, but if they don't hash the passwords, or use weak method to do it, then it's possible. Regarding other user data stored in the DB (which is usually more valuable than just the passwords) there is no difference between the login method.
saltcured 9y ago
When you say login would break, what do you mean? Just that it would be less convenient, i.e. you have to login to your identity provider once for each first party? Or are you suggesting that the redirect flow for OpenID Connect or oauth wouldn't work at all?

loeg 9y ago

I've definitely run into problems with ecommerce sites (really just Tarsnap) and embedded iframes from 3rd party payment services, while using the Chrome equivalent of this Firefox setting.

andai 9y ago
How do you do this in Chrome?
- mirthflat83 9y ago
  Using profiles I guess
- loeg 9y ago
  chrome://flags/#enable-site-per-process Strict site isolation > Enable.
cperciva 9y ago
In case it's useful: This was due to a bug in Chrome which has since been fixed. (Chrome was losing the "POST" flag when sending a redirect message between processes.)
- loeg 9y ago
  Any idea what version of Chrome fixed it? I refill my Tarsnap balance only occasionally.
  - cperciva 9y ago
    The bug was fixed on January 26th and was being merged to older supported branches expeditiously -- I don't know the exact version numbers but I'm sure that any releases they rolled after mid-February would have the fix.
    - loeg 9y ago
      I guess 65.0.3325.146 from March 5th probably works, then. Thanks!