this post was submitted on 28 Aug 2024
2279 points (99.3% liked)

Technology

59542 readers
3266 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] ripcord@lemmy.world 9 points 2 months ago* (last edited 2 months ago) (1 children)

That's not what I was thinking of, which was even more fundamental. But that's good info (and another way to cover stuff in the article).

Edit: what I was thinking originally was really stupid, that 3rd-party cookies weren't allowed at all. Which was really dumb since of course they are.

[–] catloaf@lemm.ee 8 points 2 months ago

No, you weren't far off. A single site can only get and set cookies on its domain. For example, joesblog.com can't read your Facebook session cookie, because that would mean they could just steal your session and impersonate you.

But third-party cookies are when joesblog.com has a Facebook like button on each post. Those resources are hosted by Facebook, and when your browser makes that request, it sends your Facebook cookies to Facebook. But this also lets Facebook know which page you're visiting when you make that request, which is why people are upset.

With this third-party cookie blocking, when you visit joesblog.com and it tries to load the Facebook like button, either the request or just the request's cookies will be blocked.

Although that raises an interesting question. Facebook is at facebook.com, but its resources are all hosted under fbcdn.com. Have they just already built their site to handle this? Maybe they just don't strictly need your facebook.com cookies to load scripts, images, etc. from fbcdn.com.