5 ms·
I agree on the dislike for the change, although it's not a big hassle for us at work. The bigger headache for me is updating side-projects: I get little enough
by bartread 7y ago
I agree on the dislike for the change, although it's not a big hassle for us at work.
The bigger headache for me is updating side-projects: I get little enough time to work on them and when I do have time I want to be doing interesting stuff, not jumping through bureaucratic hoops.
It's just no longer the case that you can put anything on the web, apart from basic static content, and have any hope it'll still "just work" in 5 years time because a bunch of do-gooders and busybodies at Google, Mozilla, Apple and the like are constantly fettling behaviour that's been standard for years with sometimes debatable justification.
This is one issue. Others I've had to deal with in the past 2 - 3 years that spring immediately to mind: blocking access to audio context, blocking access to device orientation[1], (lack of) reliable full screen support on iOS.
It gets tedious.
[1] This one caught me completely off guard: I'd had no idea any change was being made here until some time after it had happened.
- lima 7y agoBackwards compatibility at all costs is a main driver of insecurity. This change is a good example where the security benefits clearly outweigh the downsides.
- bartread 7y agoWe're talking about changing a default behaviour that will affect literally every website that uses cookies. That's a trade-off where I'm not sure the benefits do clearly outweigh the downsides.
- tptacek 7y agoNo, that's not true. The new default behavior doesn't change the way cookies on ordinary websites work at all; that's why the change was viable. It affects third-party cookies.
- baggy_trough 7y agoDoes it affect all iframed websites (e.g., game sites iframed by an aggregator like Kongregate)?
- judge2020 7y agoIf they use an actual iframe, most likely not. But if they're making Cross-origin requests from JS, probably.
- oarsinsync 7y agoThe article discusses iframe behaviour