Live data from Hacker News

Firefox rolls out Total Cookie Protection by default to all users

blog.mozilla.org

61–70 of 339 posts

Re: Firefox rolls out Total Cookie Protection by default to all users

#61

I wonder why Microsoft doesn't make Edge a privacy-oriented browser. I'm surprised they think they can make more from the data economy than they would gain by seriously hurting Google et al.

Since when does Microsoft care about privacy?

Re: Firefox rolls out Total Cookie Protection by default to all users

#63
post #37

Before anyone jumps to why Chrome doesn't block third-party cookies, some context: Regulators did warn Google NOT TO block third-party cookies before they provide a replacement, UK CMA accepted the latest proposal from Google: https://www.gov.uk/government/news/cma-to-keep-close-eye-on-... Apple's tracking rules also raised a lot of anti-trust concerns, giving advertisement in App Store unfair advantages among other…

Ah that’s very interesting. This really goes to show how powerful companies get when they have decent market share in the browser space while they have products on the web that have decent market share in other spaces, when there are grave concerns about what they do on either side of a decision. Chrome has been damn convenient from a dev perspective, and damn good, but the list of reasons I should be reaching for Firefox more often seems to be growing.

Re: Firefox rolls out Total Cookie Protection by default to all users

#64

Quoted post unavailable.

> What does "rolling out" mean? That Mozilla has the ability to modify my browser without my knowledge or explicit update installation?

It seems obvious to me: it means "when you install the next scheduled update".

Re: Firefox rolls out Total Cookie Protection by default to all users

#65
post #28

Earlier quoted context omitted.

It shouldn't. "Exceptions are made for cross-site cookies when they're needed for non-tracking purposes, such as those used by popular third-party login providers."[1] [1] https://blog.mozilla.org/security/2021/02/23/total-cookie-pr...

So only the popular third-party login providers are excused? That feels worrying for competition, does it not entrench the current login providers?

Probably yes, but it shouldn't be difficult to get an exception by posting a request to the Firefox bug tracker. In the meantime users can disable Enhanced Tracking Protection on the specific site with the new SSO provider.

Re: Firefox rolls out Total Cookie Protection by default to all users

#67
post #52

I've never understood the thinking that went behind allowing one site to see the existence of another site's cookie in the first place. I don't think I'm even coming at this with the security hindsight of decades, it's just common sense, isn't it?

A site isn't allowed to see another site's cookies, common sense doesn't fail you.

Re: Firefox rolls out Total Cookie Protection by default to all users

#68

Earlier quoted context omitted.

Just to clarify, Total Cookie Protection in Firefox is not the same as blocking third-party cookies. Firefox will accept third-party cookies and send them back, but only on this particular site. So third parties (read ad networks) will be able to track you on any site, but not across sites (without some other means of tracking).

Yeah, which is why sites are all requiring logins nowdays, so they can use server-side ID syncs.

> so they can use server-side ID syncs

Does this only work if you use the same email across multiple sites?

If so it's yet another reason to use a different email address with every site you sign up at.

Re: Firefox rolls out Total Cookie Protection by default to all users

#69
post #57
post #37

Before anyone jumps to why Chrome doesn't block third-party cookies, some context: Regulators did warn Google NOT TO block third-party cookies before they provide a replacement, UK CMA accepted the latest proposal from Google: https://www.gov.uk/government/news/cma-to-keep-close-eye-on-... Apple's tracking rules also raised a lot of anti-trust concerns, giving advertisement in App Store unfair advantages among other…

they can still track you based on your account (e.g. Gmail, Hotmail, iCloud) Really? I don't think so. How would that work? If you visit www.somesite.com - how would javascript on that site identify you via Gmail?

What application are you using to visit that site?

Re: Firefox rolls out Total Cookie Protection by default to all users

#70
Is this better or worse than Safari's "Prevent cross-site tracking" feature?

https://support.apple.com/guide/safari/prevent-cross-site-tr...

It appears Safari is just blocking the cookies, while Firefox is isolating the cookies. I guess Safari has to keep track of who to block while Firefox just isolates everybody. Are there other benefits to the Firefox approach?

Frankly, I have a hard time understanding why this Cookie Sandbox approach wasn't implemented a long time ago. I get that 25 years ago we weren't concerned about privacy, but there has been plenty of time to fix this. Advertiser influence?

Post reply on HN