4 ms·

Forgive my ignorance but from what I read making SameSite=Lax the default is a chrome only thing at this time right? If so,how is CSRF dead? Are all major brows

Forgive my ignorance but from what I read making SameSite=Lax the default is a chrome only thing at this time right? If so,how is CSRF dead? Are all major browsers following suit?

r00fus 7y ago
Because Google’s position on the web today is like Microsoft 15 years ago - overwhelmingly dominant.
- badrabbit 7y ago
  Yeah,but even 1% share is a lot given the sample size. I guess people are accepting monopolies as standard bearers.