The Future of Cookies

on YouTube ↗53m

" summary

Browsers change cookie behavior: Chrome moved default to SameSite=Lax (2020) then introduced a phased rollback and a Privacy Sandbox, Safari blocks third‑party cookies and adds CNAME cloaking plus IP checks, and Firefox isolates cookies into separate cookie jars (2022). Hidden iframe-based SSO and front‑channel logout now fail unpredictably (Teams demo), SameSite=None rollout breaks old clients, and cookie prefixes like __Host- enforce security. Treat cookies as first‑party only, rely on server session tracking and back‑channel logout, and test across browsers and domains.

AI-written summary · about

" chapters (4)

1. 0:00Start
2. 25:16Intelligent Tracking Prevention = Al
3. 27:34CNAME Cloaking
4. 41:40Federated Credential Management API

" related talks

• 44mThe Future of CookiesAnders Abel · NDC London 2024
• 50mThe Future of CookiesAnders Abel · NDC Security 2024
• 13mPreparing for a more private webMaud Nalpas · Google I/O 2021
• 42mA Deep Dive Into SameSite Cookies, What They Are and Why They MatterStephen Rees-Carter · NDC Sydney 2020
• 16mOpen web standards with Privacy SandboxRowan Merewood · Google I/O 2022
• 27mPatterns for privacyMaud Nalpas, Rowan Merewood · Chrome Dev Summit 2020
• 49mCookie Security Myths and MisconceptionsDavid Johansson · AppSec USA 2017
• 31mPrivacy sandboxBarb Smith, Michael Kleber, Rowan Merewood, Kaustubha Govind · Google I/O 2021