[Openid-specs-ab] Browser Interactions STC Tomorrow(?)

[Tim Cappalli]

Here’s another blog post that goes a bit deeper and touches on SSO implications and behaviors.

Introducing State Partitioning - Mozilla Hacks - the Web developer blog<https://hacks.mozilla.org/2021/02/introducing-state-partitioning/>


From: Openid-specs-ab <openid-specs-ab-bounces at lists.openid.net> on behalf of George Fletcher via Openid-specs-ab <openid-specs-ab at lists.openid.net>
Date: Tuesday, February 23, 2021 at 13:53
To: Vittorio at auth0.com <Vittorio at auth0.com>, Artifact Binding/Connect Working Group <openid-specs-ab at lists.openid.net>
Cc: George Fletcher <gffletch at aol.com>
Subject: Re: [Openid-specs-ab] Browser Interactions STC Tomorrow(?)
Firefox just enabled domain partitioned cookie jars...

https://blog.mozilla.org/security/2021/02/23/total-cookie-protection/<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fblog.mozilla.org%2Fsecurity%2F2021%2F02%2F23%2Ftotal-cookie-protection%2F&data=04%7C01%7Ctim.cappalli%40microsoft.com%7C82d18b1e998b489d37bd08d8d82c55d6%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637497032233672566%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=CqarhGStIp1IMkOk6QhXH4kwWMCq6FoaUXa%2F6xil27s%3D&reserved=0>

This could change the SSO flow (extra popup) if "Strict Enhanced Tracking Protection" is enabled.

On 2/23/21 12:58 PM, Vittorio Bertocci via Openid-specs-ab wrote:
Didn’t have time to do any work on my side yet, so nothing to report from me

On Tue, Feb 23, 2021 at 09:57 Tim Cappalli via Openid-specs-ab <openid-specs-ab at lists.openid.net<mailto:openid-specs-ab at lists.openid.net>> wrote:
Hey all,

Does anyone have any agenda items for tomorrow’s call?

Thanks,
tim
_______________________________________________
Openid-specs-ab mailing list
Openid-specs-ab at lists.openid.net<mailto:Openid-specs-ab at lists.openid.net>
http://lists.openid.net/mailman/listinfo/openid-specs-ab<https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.openid.net%2Fmailman%2Flistinfo%2Fopenid-specs-ab&data=04%7C01%7Ctim.cappalli%40microsoft.com%7C82d18b1e998b489d37bd08d8d82c55d6%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637497032233672566%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=9Q2H8oXH2N9IiRbCQaC72OXC%2BVWtIE3DyDXV2m%2FCszs%3D&reserved=0>



_______________________________________________

Openid-specs-ab mailing list

Openid-specs-ab at lists.openid.net<mailto:Openid-specs-ab at lists.openid.net>

http://lists.openid.net/mailman/listinfo/openid-specs-ab<https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.openid.net%2Fmailman%2Flistinfo%2Fopenid-specs-ab&data=04%7C01%7Ctim.cappalli%40microsoft.com%7C82d18b1e998b489d37bd08d8d82c55d6%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637497032233682560%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=xCiS8GRBNr4hd3fckSiYQMDAGHJVBh75zx2sAWatLJ0%3D&reserved=0>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20210224/41d5c9c8/attachment.html>