3 ms·
When Mozilla started making big changes to tracking protection, somewhere around versions 86-90, I started noticing all sorts of broken credential management st
by csnover 5y ago
When Mozilla started making big changes to tracking protection, somewhere around versions 86-90, I started noticing all sorts of broken credential management stuff, and I wonder if this is just another manifestation of that.
With strict ETP turned on, extensions like Cookie AutoDelete stopped working due to some new access restriction[0], and cookies that had been set while strict ETP was turned on—even when it was turned off again—became zombies that could only be deleted through about:preferences.
I’ve had to manually set `privacy.purge_trackers.enabled` to `false` to get it to stop automatically erasing (first-party!) login cookies several times per week. I do not understand what kind of heuristic is being used to decide something is a tracker, but it seems to be not good at it.
For a while, Firefox would also randomly prompt me for a master password after running for about 24 hours. This seemed to stop when I turned off strict ETP, but other people reporting the same problem said they didn’t even have strict ETP turned on to begin with, so who knows? It’s all just so random.
I still have situations today where I navigate (via the address bar or the browser history) to HN, or GitHub, or some other site where I have a valid login cookie, and Firefox just decides that it’s not going to send the cookie this time. If I reload the page, it decides now it will send the cookie. If I perform the exact same navigation that broke a moment ago, now it works fine.
I have no idea what changed, and everything that happens—just like the OP’s problem—is so weird and vague that I cannot even submit a decent bug report. At least this bug is consistent; most of my problems seem to be data races. I hope they are able to figure out what is going wrong and, ideally, that it leads to some fixes for whatever broken logic is causing so much trouble with credential management in general.
[0] https://github.com/Cookie-AutoDelete/Cookie-AutoDelete/issues/807 https://github.com/Cookie-AutoDelete/Cookie-AutoDelete/issue...
- tfvlrue 5y agoCan confirm that I have experienced the same problem you've described (sometimes it just doesn't send the cookies upon initially navigating to a site, and after a refresh suddenly I'm logged in and everything is fine). It's so sporadic I don't know how to report it. At least it's not just me I guess :/