5 ms·
What will be the ads & tracking companies' next step? Maybe they'll want to serve tracking cookies as Secure and HttpOnly, as if they were login cookies? o.O
by KajMagnus 8y ago
What will be the ads & tracking companies' next step? Maybe they'll want to serve tracking cookies as Secure and HttpOnly, as if they were login cookies? o.O (to prevent the tracking cookies from getting deleted after 7 days: "Client-Side Cookies Capped to 7 Days of Storage")
- nyuszika7h 8y agoIt's not that simple if I understood correctly. The trackers can only set first-party cookies on other websites via JavaScript, and cookies set via JS cannot be HttpOnly.
- KajMagnus 8y agoWhat I had in mind, is that the ads & tracking companies, would want to integrate/add some of their code server side, to be able to set HttpOnly cookies. Crazy next step?