4 ms·
Google delays phase-out of third-party cookies on Chrome yet again
- lordofmoria 3y agoThis completely breaks iframes that use session cookies for authentication. The Storage Access API (https://developers.google.com/privacy-sandbox/3pcd/storage-access-api https://developers.google.com/privacy-sandbox/3pcd/storage-a...), which is the supposed way around this is very much still a work in progress ("Work is continuing to resolve all remaining blocking issues, before standardizing the API.") - and it seems ridiculous that they'd sunset 3rd party cookies before this is fully baked / supported (not to mention that the UX of the flow is very rough). I'm really hoping this gets knocked down by regulators. It's really all to do with anti-competitive behavior from google ads, and nothing to do with privacy - all the big players have already long-since moved on, because of ad-revenue has shifted to mobile.
- medmunds 3y agoMore discussion in https://news.ycombinator.com/item?id=40143242 https://news.ycombinator.com/item?id=40143242 (though this is a better source).
- lakomen 3y agoWouldn't removing 3rd party cookies break oidc / oauth2? At least Keycloak on SPA won't work without.