3 ms·
Firefox's behaviour is that is makes everything except the eTLD+1 grey, because that's what's normally useful for evaluating authenticity. There's no distinctio
by gsnedders 8y ago
Firefox's behaviour is that is makes everything except the eTLD+1 grey, because that's what's normally useful for evaluating authenticity. There's no distinction made between `www` and any other subdomain.
- tinus_hn 8y agoThese are all in the same origin so they can read cookies and manipulate pages.
- gsnedders 8y agoSubdomains are in different origins; cookies have their own weird notion of security.
- Sohcahtoa82 8y agoThis is not true unless the cookie is specifically marked to be domain-wide. There was a time when IE misbehaved. Not sure if this fixed in Edge: https://www.mxsasha.eu/blog/2014/03/04/definitive-guide-to-cookie-domains/ https://www.mxsasha.eu/blog/2014/03/04/definitive-guide-to-c...
- gsnedders 8y ago> There was a time when IE misbehaved. Not sure if this fixed in Edge: https://www.mxsasha.eu/blog/2014/03/04/definitive-guide-to-c.. https://www.mxsasha.eu/blog/2014/03/04/definitive-guide-to-c.... Pretty sure that was fixed in Edge and IE (as a security issue).
- Sohcahtoa82 8y agoWhile that certainly may be the case, it's been shown time and time again how many users (and even sys admins!) are bad at installing patches.