2 ms·

Hacking around Safari's 7-day Cookie Limit

• EGreg 3y ago
  It does seem like this is correct ... a server can store any cookie in a first-party context, and Safari doesn't mess with that (as far as I know, anyway). So, if it matches the name of the client-side cookie, then it can persist that cookie. However, I do recall seeing that ITP got stronger recently, whereby Safari might actually erase server-set, secure, first-party cookies after 7 days, on any site that uses some sort of third-party CNAME cloaking domain that is on their shitlist. Is that true? How far does ITP reach these days to delete information, in these cases?
  • EGreg 3y ago
    Oof! Seems Safari now caps ALL COOKIES to 7 days https://snowplow.io/blog/tracking-cookies-length/ https://snowplow.io/blog/tracking-cookies-length/
• lapcat 3y ago
  (2022)