2 ms·
Everyone else just shipped some level of removing 3rd party cookies, but did so in a non specified way, with arbitrary carve outs & limitations & workarounds.
by jauntywundrkind 2y ago
Everyone else just shipped some level of removing 3rd party cookies, but did so in a non specified way, with arbitrary carve outs & limitations & workarounds.
Google has been extremely busy trying to find ways to get login flows to keep working adequately well. In a specified, standardized manner. Look at what explainers they have, and note how many deal with 3rd party cookies or storage bucket access, https://github.com/orgs/explainers-by-googlers/repositories?type=all https://github.com/orgs/explainers-by-googlers/repositories?...
Also compounding the difficulty is that we added storage isolation to the web, making even more of a fractal maze of problems, before figuring out how we were going to get rid of 3rd party cookies. That's probably fine, it's been a progressive layering of pretty good privacy/security, but it's more specced out complexity that has to be tangled with.