3 ms·
Why None instead of Lax? The uses cases you mentioned for the None cookie seem like they would still work with a Lax cookie.
by Buge 7y ago
Why None instead of Lax? The uses cases you mentioned for the None cookie seem like they would still work with a Lax cookie.
- jacobparker 7y agoAh, good point. So it depends on your site. Some sites need to do things like serve embeddable content or be an OAuth identity provider, etc., and SameSite=None is required in those cases. Sorry for not being more clear about that.