5 ms·
This sounds like cookies should have worked from the start. I suspect this is going to help against some CSRF as well?
by xorcist 5y ago
This sounds like cookies should have worked from the start.
I suspect this is going to help against some CSRF as well?
- jefftk 5y agoHow would this help with CSRF? The new feature only applies when someone intentionally clears their cookies.
- Terretta 5y agoNot how I read it. To me it says Facebook.com cookies set through site A are separate from those stored through site B. Even if you never clear, fb cookies would no longer be a single cookie to link these, but separate. The jar is the key new thing, not the emptying.
- jefftk 5y agoThe approach to the cookie jar isn't new in Firefox 91; that's Total Cookie Protection, added in Firefox 86: https://blog.mozilla.org/security/2021/02/23/total-cookie-protection/ https://blog.mozilla.org/security/2021/02/23/total-cookie-pr...
- Terretta 5y agoDelete the word “new”, emphasis on “key”.