Technology

59601 readers

2940 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

Firefox rolls out Total Cookie Protection by default to all desktop users worldwide | It is Firefox’s strongest privacy protection to date, confining cookies to the site where they were created (blog.mozilla.org)

submitted 2 months ago by ForgottenFlux@lemmy.world to c/technology@lemmy.world

210 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] ripcord@lemmy.world 0 points 2 months ago* (last edited 2 months ago) (1 children)

That's not what I was thinking of, which was even more fundamental. But that's good info (and another way to cover stuff in the article).

Edit: what I was thinking originally was really stupid, that 3rd-party cookies weren't allowed at all. Which was really dumb since of course they are.

[–] catloaf@lemm.ee 0 points 2 months ago

No, you weren't far off. A single site can only get and set cookies on its domain. For example, joesblog.com can't read your Facebook session cookie, because that would mean they could just steal your session and impersonate you.

But third-party cookies are when joesblog.com has a Facebook like button on each post. Those resources are hosted by Facebook, and when your browser makes that request, it sends your Facebook cookies to Facebook. But this also lets Facebook know which page you're visiting when you make that request, which is why people are upset.

With this third-party cookie blocking, when you visit joesblog.com and it tries to load the Facebook like button, either the request or just the request's cookies will be blocked.

Although that raises an interesting question. Facebook is at facebook.com, but its resources are all hosted under fbcdn.com. Have they just already built their site to handle this? Maybe they just don't strictly need your facebook.com cookies to load scripts, images, etc. from fbcdn.com.