3 ms·
It's a great idea, and I think it should be the default behavior for cookies - require users to explicitly agree whenever a cross-site cookie comes up.
by Udo 14y ago
It's a great idea, and I think it should be the default behavior for cookies - require users to explicitly agree whenever a cross-site cookie comes up.
- icebraining 14y agoHow would you frame that question in terms that a user who calls IE "the internet" could understand?
- homakov 14y agohm.. "Do you want to expose your identity .. " dunno
- Udo 14y agoIn that case either automatically ignoring the cookie or displaying the equivalent of the "this certificate is invalid" warning would be workable. It's a compromise. Personally, I believe nothing of value would be lost if browsers simply enforced originOnly period (without supporting anything else).