1

Recently, after blocking third-party cookies, I thought that all non-domain cookies will be blocked.
But as a surprise Google (google.com) cookies are not removed even if there is no link between the visited domain and google.com, and still, that cookie is present.

Does anyone have an idea why Google cookies are treated differently?

Browser: Microsoft Edge (Chromium)

Image as proof

4
  • How did you block 3rd party cookies?
    – schroeder
    Jan 31 at 9:04
  • There is feature in cookie setting in edge :) Jan 31 at 9:26
  • Visiting this page in chromium with no extensions I get only cookies from mozilla.org and blog.mozilla.org on this page. Are you sure that this is not caused by some extensions you use? Jan 31 at 10:31
  • @SteffenUllrich I have only 2 extension (uOrigin block, The Great suspender) and they both do not use google.com. Jan 31 at 17:24
1

No, it's not (assuming you aren't on google.com, as indeed you aren't in that screenshot). However, depending on the way the browser works, there are a few things that could be going on here:

  • The browser might not actually block all third-party cookies, just ones you haven't visited. This is the default behavior in some browsers, like Safari. Since you've presumably visited google.com, it would be trusted.
  • The browser might only be blocking new/updated third-party cookies, and not prevented from sending existing ones (that haven't expired) from before that setting was applied.
  • The browser might be reporting all the cookies it has for all pages with content on the page, but not actually sending the third-party cookies. That's weird, but hardly the weirdest thing I've seen browsers do.
  • The browser might automatically trust certain domains. Chromium is made by Google, after all, even if Microsoft then wraps it up in their own little-c chrome.
  • The browser might have been explicitly configured to trust google. It's widely used and trusted, including for single sign-on, and potentially you or somebody else acknowledged the value to allow it on third-party sites.

There are probably more options; those are just the ones that seem most likely to me.

2
  • so according to you answer, I think there is no way to block google.com cookies on other domain sites, not universally 😅. Am I right? Jan 31 at 17:29
  • Well, it depends why you're seeing the behavior that you see. It might just be a batter of fixing a misconfiguration. Alternatively, some browsers offer better privacy controls, including cookie controls, than Edge does (even IE had the ability to block, allow, or block-when-third-party, if you knew how to configure it). There's also extensions, which can add tremendous amounts of security and privacy functionality to the browser, at the risk of some loss of site functionality and/or a malicious one doing something harmful.
    – CBHacking
    Feb 1 at 3:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.