3 ms·
Someone smarter than me will pop in with better info, but when you authenticate on a Google service, it will send you through something like accounts.youtube.co
by corywatilo 5y ago
Someone smarter than me will pop in with better info, but when you authenticate on a Google service, it will send you through something like accounts.youtube.com. My takeaway was that they use it as an authentication service for a lot of Google products.
- dmitriid 5y agoThey set auth cookies probably, and Youtube has never been properly integrated with Google's auth flow. That said, not a single Google service is really properly integrated into that flow.
- Closi 5y agoIt's actually because Youtube is integrated properly into their auth flow. It's so when you login to one of google's websites and visit another, you are already logged on and don't have to go through the auth-flow. i.e. Without this trick, if you logged into gmail and then went to YouTube you would have to sign in again. This is because the YouTube.com domain can't access the mail.google.com cookie because of the same-origin policy. (Note: Even if you use cross-origin resource sharing headers, cookies will still not work across domains for all users as several browsers such as Safari have third-party cookies disabled by default which stops the ability of sharing cookies over CORS).
- mjg59 5y agoMy recollection is that's just because logins to Google bounce through any domains where they may need to update cookies
- lvs 5y agoPerhaps this means the OP can blacklist www.youtube.com and whitelist accounts.youtube.com ?
- axiosgunnar 5y agojust blacklist googlevideo.com