Thirdparty: Difference between revisions

Thirdparty (view source)

164 bytes added , 11 June 2010

Confirmed users

1,247

edits

@@ Line 102: / Line 102: @@
 = Implementation =
-'''Step 1:''' Make third party cookies persist for the session only, by default. (Can be disabled by a ''network.cookie.thirdparty.sessionOnly'' pref.) See bug 565475; patch up.
+Relevant bugs:
-'''Step 2:''' Double-key cookies by (first party domain, setting domain). See bug 565965; patch in progress.
+* {{Bug|565965}}: Double-key cookies by (first party domain, setting domain). Work is in progress.
-'''Step 3:''' Implement the first party carry-over rules described above, probably as a separate service such that localstorage etc. can use it.
+* {{Bug|565475}}: Make third party cookies persist for the session only. This is controlled by a hidden pref, ''network.cookie.thirdparty.sessionOnly''. Landed on trunk.
+* Develop a more intuitive way for the user to indicate that they trust a certain site to interact with other sites.
+* Implement the first party carry-over rules described above, probably as a separate service such that localstorage etc. can use it.
+* Apply the rules developed here to localstorage and such.
 = Further Steps =