Thirdparty: Difference between revisions

Thirdparty (view source)

156 bytes added , 10 June 2010

148

edits

@@ Line 102: / Line 102: @@
 = Implementation =
-'''Step 1:''' Make third party cookies persist for the session only, by default. (Can be disabled by a ''network.cookie.thirdparty.sessionOnly'' pref.) See bug 565475; patch up.
+Relevant bugs:
-'''Step 2:''' Double-key cookies by (first party domain, setting domain). See bug 565965; patch in progress.
+* Bug 565965: Double-key cookies by (first party domain, setting domain). Work is in progress.
-'''Step 3:''' Implement the first party carry-over rules described above, probably as a separate service such that localstorage etc. can use it.
+* Bug 565475: Make third party cookies persist for the session only. This is controlled by a hidden pref, ''network.cookie.thirdparty.sessionOnly''. Landed on trunk.
+* Develop a more intuitive way for the user to indicate that they trust a certain site to interact with other sites.
+* Implement the first party carry-over rules described above, probably as a separate service such that localstorage etc. can use it.
+* Apply the rules developed here to localstorage and such.
 = Further Steps =