4 ms·
How does Total Cookie Protection work with sites that redirect users to authentication providers on other domains ? What about shops that redirect to payment pr
by xuhu 6y ago
How does Total Cookie Protection work with sites that redirect users to authentication providers on other domains ? What about shops that redirect to payment processors that rely on some magic cookie sharing in the background ? What about company.com loading some cookie-dependent content from company-cdn.com ?
- DyslexicAtheist 6y ago> What about company.com loading some cookie-dependent content from company-cdn.com ? I've always tried to set up delivery of all static assets w/out cookies so that I do not incur the performance overhead. Not that it makes a huge difference except on very large sites. But last time I checked, performance & speed-test tools even remove points if this isn't done. Seems this is a feature not a bug or am I missing something?
- Ayesh 6y agoAs far as I understand, this only affects sub requests (iframes, Ajax requests, scripts, CSS, etc), and not the main request. In a redirect, the third party site is used as a friest party request, and should not be limited by this. See same site cookies and referrer policy to limit how much information is leaked to a third party with redirects.