2 ms·
The point of this change isn't to break ads, the tracking benefits are at best incidental. Ad networks can just opt-out anyway. The point is to block CSRF atta
by danShumway 7y ago
The point of this change isn't to break ads, the tracking benefits are at best incidental. Ad networks can just opt-out anyway.
The point is to block CSRF attacks on ordinary websites for developers who don't know enough to secure their cookies.
> But it turns out that if you just break the web's ads, users tend to like it, if they even notice in the first place.
Breaking just the web's ads wouldn't have the same impact on security. The reason this change is valuable is because it's not restricted to specific blacklists or domains or applied via an algorithm, it's universal. I really like the tracking protections that Safari/Firefox are adding, but comparing them to this is apples and oranges.
They're policies that are designed for different purposes.