privacytests/privacytests.org

Test leaks allowed by browsers for SSOs

arthuredelstein opened this issue · 4 comments

uazo commented

I think he refers to CookieSettings::MitigationsEnabledFor3pcdInternal() (net::features::kTpcdSupportSettings and net::features::kTpcdMetadataGrants see https://source.chromium.org/chromium/chromium/src/+/main:components/tpcd/README.md) but currently (v119) it is off by default in chromium.
don't know in chrome if it is active by default.

thestinger commented

It's referring to what Brave and Firefox are doing for their cookie partitioning.

  • 👍2
uazo commented

I would add that in v120 there is a new flag kTpcdHeuristicsGrants disabled by default, but can be activated by finch in chrome

explainer: https://github.com/amaliev/3pcd-exemption-heuristics/blob/main/explainer.md
bugid: https://bugs.chromium.org/p/chromium/issues/detail?id=1484324