Timeline for Why http cookies are automatically sent to the server upon a http requests and CSRF
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 17, 2017 at 22:28 | comment | added | dandavis | well that's good news (to me) about google. i'm not sure about how it handles WebWorkers, but the rest seemed to be a good idea... | |
| Apr 17, 2017 at 22:14 | comment | added | Benoit Esnard | @dandavis: Well, Google sells a lot of ads, and have implemented it more than a year ago, so I guess it's just a matter of time before other browser vendors do the same. But you're right, we'll need to support older browsers for years before migrating. | |
| Apr 17, 2017 at 22:05 | comment | added | dandavis | samesite cookies would kill advertiser spying, so as long as your browser's maker sells ads (3/4 do), don't hold your breath on this getting implemented. | |
| Apr 17, 2017 at 15:36 | history | answered | Benoit Esnard | CC BY-SA 3.0 |