Re: Cookies Settings Observations
Mike West <[email protected]>
| Newsgroups | gmane.org.w3c.tag |
|---|---|
| Message-ID | <CAKXHy=cUAkUgtKVSHOFEb+-a_od57J97uiZr+rN4-_xDXDj2tA@mail.gmail.com> |
On Mon, Jan 26, 2015 at 9:12 PM, Yehuda Katz <[email protected]> wrote: > I recently asked around about why we don't have a CSP mechanism (or other > opt in) to tell the browser that the cookies of a particular domain are > "same origin only". > Ah, cookies. What a mess. I took a stab at something like this in https://tools.ietf.org/html/draft-west-first-party-cookies-00. There seems to be vague interest in the HTTP WG, but I haven't gotten around to putting a prototype together yet. -mike -- Mike West <[email protected]>, @mikewest Google Germany GmbH, Dienerstrasse 12, 80331 München, Germany, Registergericht und -nummer: Hamburg, HRB 86891, Sitz der Gesellschaft: Hamburg, Geschäftsführer: Graham Law, Christine Elizabeth Flores (Sorry; I'm legally required to add this exciting detail to emails. Bleh.)