3 ms·
You can't make a first party cookie work the same as a third party cookie. They wouldn't follow you across sites, which is the whole point of a third party trac
by eli 8y ago
You can't make a first party cookie work the same as a third party cookie. They wouldn't follow you across sites, which is the whole point of a third party tracking cookie. Facebook wouldn't know it's you visiting a site or know the same person visited site A and site B.
- michaelbuckbee 8y agoYou're correct if you're _only_ using cookies. My point was that it could be combined with the other tracking means (say a browser fingerprint or HSTS fingerprint or both) and that value be transferred in a "first party" domain that was really just a CNAME'd third party server -> and you have a solution that would meet the requirement to "only set 1st party cookies" but would miss the intent of the regulation.
- eli 8y agoIf you had a reliable way to fingerprint browsers and tie them to a Facebook ID, then you don't need cookies at all.