Comment on Firefox rolls out Total Cookie Protection by default to all desktop users worldwide | It is Firefox’s strongest privacy protection to date, confining cookies to the site where they were created

• ripcord@lemmy.world ⁨2⁩ ⁨months⁩ ago

  Honestly, I thought that’s how it already worked.

  source

  • ArchRecord@lemm.ee ⁨2⁩ ⁨months⁩ ago

    Total Cookie Protection was already a feature, (introduced on Feb 23st 2021) but it was only for people using Firefox’s Enhanced Tracking Protection (ETP) on strict mode.

    They had a less powerful third-party cookie blocking feature for users that didn’t have ETP on strict mode, that blocked third party cookies on specific block lists. (i.e. known tracking companies)

    This just expanded that original functionality, by making it happen on any domain, and have it be the default for all users, rather than an opt-in feature of Enhanced Tracking Protection.

    source

    • ripcord@lemmy.world ⁨2⁩ ⁨months⁩ ago

      That’s not what I was thinking of, which was even more fundamental. But that’s good info (and another way to cover stuff in the article).

      source

      • catloaf@lemm.ee ⁨2⁩ ⁨months⁩ ago

        No, you weren’t far off. A single site can only get and set cookies on its domain. For example, joesblog.com can’t read your Facebook session cookie, because that would mean they could just steal your session and impersonate you.

        But third-party cookies are when joesblog.com has a Facebook like button on each post. Those resources are hosted by Facebook, and when your browser makes that request, it sends your Facebook cookies to Facebook. But this also lets Facebook know which page you’re visiting when you make that request, which is why people are upset.

        With this third-party cookie blocking, when you visit joesblog.com and it tries to load the Facebook like button, either the request or just the request’s cookies will be blocked.

        Although that raises an interesting question. Facebook is at facebook.com, but its resources are all hosted under fbcdn.com. Have they just already built their site to handle this? Maybe they just don’t strictly need your facebook.com cookies to load scripts, images, etc. from fbcdn.com.

        source
  • Telorand@reddthat.com ⁨2⁩ ⁨months⁩ ago

    They’ve been doing this with container tabs, so this must be the successor to that idea (I’m going to assume they’ll still have container tabs).

    source

    • jollyrogue@lemmy.ml ⁨2⁩ ⁨months⁩ ago

      Container tabs are still a thing in FF. This is based on that work, if I remember correctly.

      source

      • Telorand@reddthat.com ⁨2⁩ ⁨months⁩ ago

        I love container tabs. It’s one of the reasons I went back to FF.

        source

        • -> View More Comments
    • snaggen@programming.dev ⁨2⁩ ⁨months⁩ ago

      Container tabs are still useful, as they let you use multiple Cookie jars for the same site. So, it is very easy to have multiple accounts on s site.

      source
• FiniteBanjo@lemmy.today ⁨2⁩ ⁨months⁩ ago

  Unless that cookie was somehow important for you to use both sites.

  source
• Buddahriffic@lemmy.world ⁨2⁩ ⁨months⁩ ago

  From my experience, blocking 3rd party cookies in general doesn’t seem to make any difference for site functionality anyways. Though I never log into sites with a Google or FB account other than Google or FB sites (and rarely at all for the latter).

  source
• werefreeatlast@lemmy.world ⁨2⁩ ⁨months⁩ ago

  I would love to see an icon of a neutered cookie please 🥺😄.

  source