Firefox

18056 readers

120 users here now

A place to discuss the news and latest developments on the open-source browser Firefox

founded 5 years ago

MODERATORS

k_o_t@lemmy.ml

437

Firefox rolls out Total Cookie Protection by default to all desktop users worldwide | It is Firefox’s strongest privacy protection to date, confining cookies to the site where they were created (blog.mozilla.org)

submitted 4 months ago by ForgottenFlux@lemmy.world to c/firefox@lemmy.ml

24 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] umbrella@lemmy.ml 61 points 4 months ago (2 children)

I'm surprised this isn't already a thing for decades but ok.

[–] Ephera@lemmy.ml 25 points 3 months ago (1 children)

It is already a thing for 2 years, since this is just an update to an old blog post to say that they'll do even more now.

Aside from that, it wasn't a thing, because as per the usual something on the web breaks when you change behavior like that, because some webpages rely on third-party cookies to provide their core functionality.

Someone (in this case the Tor Browser devs) had to come up with a way to have third-party cookies ~~and eat them, too~~ but isolate them from the third-party cookies that got created on other webpages.
On the technical side, this is called "first-party isolation", and basically each domain you browse to gets its own cookie jar to store first- and third-party cookies in.

[–] graphene@lemm.ee 2 points 3 months ago

Cookie jar... I will use that term from now on

[–] Dagnet@lemmy.world 24 points 4 months ago (1 children)

Right? When I first started learning web dev (just a bit) I thought cookies were like that, quarantined to each website. Its insane that it hasnt been like that for this long

[–] Vincent@feddit.nl 8 points 3 months ago

Well, they were already quarantined to each website, but if that same website got embedded in half of all websites, that still enables a lot of tracking. So now they're also quarantined to each website and the website it's embedded in, if any.