The Future of Cookies

on YouTube ↗50m

" summary

Timeline of browser changes and concrete breakages: Chrome moves cookies to SameSite=Lax default (2020) then delays and progressively rolls out third‑party cookie blocking (1% on Jan 4, target 100% by year end), Safari blocks CNAME/IP tracking and applies intelligent tracking prevention that can flip cookie semantics, Firefox implements cookie partitioning (Total Cookie Protection). Practical impacts: name prefixes like _Secure and _Host are required, front‑channel OpenID flows fail and OpenID Connect iframe session checks broken force back‑channel logout and stateful servers.

AI-written summary · about

" chapters (13)

1. 0:00Cookies history
2. 6:06Browser security features
3. 12:20Cookie security limits
4. 18:00Prevent third-party tracking
5. 24:25Safari privacy impact
6. 32:14Firefox Total Cookie Protection
7. 34:43Privacy feature priorities
8. 35:46Google’s delayed cookie phase-out
9. 37:36Privacy Sandbox limits
10. 41:55Federated Credential Management gaps
11. 42:38Super cookies unreliability
12. 43:26Future of cookies and SSO
13. 44:33Q&A on public suffix lists

" related talks

• 44mThe Future of CookiesAnders Abel · NDC London 2024
• 53mThe Future of CookiesAnders Abel · NDC Oslo 2023
• 13mPreparing for a more private webMaud Nalpas · Google I/O 2021
• 42mA Deep Dive Into SameSite Cookies, What They Are and Why They MatterStephen Rees-Carter · NDC Sydney 2020
• 16mOpen web standards with Privacy SandboxRowan Merewood · Google I/O 2022
• 27mPatterns for privacyMaud Nalpas, Rowan Merewood · Chrome Dev Summit 2020
• 27mWho Left Open the Cookie Jar? A Comprehensive Evaluation of Third-Party Cookie PoliciesTom Van Goethem, Wouter Joosen, Gertjan Franken · USENIX ATC '19
• 31mPrivacy sandboxBarb Smith, Michael Kleber, Rowan Merewood, Kaustubha Govind · Google I/O 2021