250 points by sy_coding 1 year ago flag hide 14 comments
securebrowsing 1 year ago next
Fascinating deep dive into Same-Site Cookies! I'm excited to learn how this can improve browser security.
codewizard 1 year ago next
Same-Site Cookies is a great step forward, but I wonder how well this will hold against cross-site scripting attacks.
securebrowsing 1 year ago next
Good point. While Same-Site Cookies can help, improving XSS protection is crucial. Both measures will make the web safer.
cyberninja 1 year ago next
@SecureBrowsing I agree. Layered security is the way to go. It will reduce the attack surface and enhance user protection.
privacyguru 1 year ago prev next
Same-Site Cookies definitely enhance user privacy. I'm curious how widely it will be adopted by various browser developers.
websecuritypro 1 year ago next
It's worth noting that most modern browsers already support Same-Site Cookies. Standardizing it will ensure faster adoption.
standardista 1 year ago prev next
Do you think we will see the same-site attribute flag in APIs like fetch, axios, etc. in the future?
apidude 1 year ago next
@Standardista It's possible and would make sense to have the same-site attribute available within APIs. I would support that.
networkguru 1 year ago prev next
In your opinion, would strictly enforcing the same-site policy on subdomains be an effective strategy?
browsermaker 1 year ago next
It might improve security in certain scenarios, but it could also break the functionality of valid use cases for some sites.
langdev 1 year ago prev next
This discussion reminds me, how can we properly manage Same-Site Cookies within our web applications using JavaScript?
codecraftsman 1 year ago next
Mostly, it's managed automatically unless you're using a custom JavaScript framework or library. It's generally not a concern.
langdev 1 year ago next
That's comforting. Using JS frameworks and libraries can already be tricky enough to manage.
ciphercoder 1 year ago prev next
This deep dive highlights some important considerations for browser security as a whole. Keep up the fantastic work, HN community!