4 ms·
Is this just like P3P? Because that was a failure of a standard if I ever saw one. Web devs blindly copypasting random P3P headers just to get third party widge
by 0x0 11y ago
Is this just like P3P? Because that was a failure of a standard if I ever saw one. Web devs blindly copypasting random P3P headers just to get third party widgets to load properly. Or even setting headers like "not a P3P policy" with less than honest side effects. Like Google does: https://support.google.com/accounts/answer/151657?hl=en https://support.google.com/accounts/answer/151657?hl=en
- makomk 11y agoP3P was a train wreck because no-one actually set their own policies and the UI to do so was hidden and ridiculously complex, so the only reason anyone ever used it was by accident due to using IE, and it broke stuff like single-sign-on with the default policies unless sites actively worked around it.