Firefox

18056 readers

138 users here now

A place to discuss the news and latest developments on the open-source browser Firefox

founded 5 years ago

MODERATORS

k_o_t@lemmy.ml

593

Under a toot announcing that firefox now supports CHIPS (Cookies Having Independent Partitioned State) (lemmy.zip)

submitted 2 months ago by Blisterexe@lemmy.zip to c/firefox@lemmy.ml

110 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] Blisterexe@lemmy.zip 88 points 2 months ago* (last edited 2 months ago) (1 children)

Yes and no, total cookie protection prevents cookies from loading from other sites, CHIPS is a new standard that makes it so that that is impossible* to begin with. (simpifying here but thats the idea)

*unless the browser allows it

[–] ReversalHatchery@beehaw.org 12 points 2 months ago (2 children)

my impression was that it was impossible already, because there was effectively a different cookie storage for every site

[–] ReversalHatchery@beehaw.org 26 points 2 months ago (1 children)

https://developer.mozilla.org/en-US/docs/Web/Privacy/Privacy_sandbox/Partitioned_cookies

CHIPS is similar to the state partitioning mechanism implemented by Firefox. The difference is that state partitioning partitions cookie storage and retrieval into separate cookie jars for each top-level site, without a mechanism to allow opt-in to third-party cookies if desired. As browsers start to phase out third-party cookie usage, there are still valid, non-tracking uses of third-party cookies that need to be permitted while developers begin to handle this change.

so this adds a setting to allow a site access to shared 3rd party cookies, when the site supports the feature?

[–] LWD@lemm.ee 4 points 2 months ago

Based on Mozilla's documentation, it looks like CHIPS only applies to "cross site" cookies that are just accessible on different subdomains of the same site. A third party cookie could share data between a.site.example and b.site.example if it asked nicely, but not on site2.example.

If this isn't about it subdomains exclusively, it's not apparent to me. But it's all pretty confusing, and CHIPS appears to be just one minor thing that Google introduced when they were creating Privacy Sandbox back in 2022. (You know, to facilitate the total removal of third-party cookies, something they eventually backtracked on anyway.)

[–] Blisterexe@lemmy.zip 7 points 2 months ago

You can embed bits of a website in other websites, that's how 3rd party cookies exist