Google I/O Google, the largest handler of web cookies, plans to change the way its Chrome browser deals with the tokens, ostensibly to promote greater privacy, following similar steps taken by rival browser makers Apple, Brave, and Mozilla.
At Google I/O 2019 on Tuesday, Google's web platform director Ben Galbraith announced the plan, which has begun to appear as a hidden opt-in feature in Chrome Canary – a version of Chrome for developer testing – and is expected to evolve over the coming months.
When a website creates a cookie on a visitor's device for its own domain, it's called a first-party cookie. Websites may also send responses to visitor page requests that refer to resources on a third-party domain, like a one-pixel tracking image hosted by an advertising site. By attempting to load that invisible image, the visitor enables the ad site to set a third-party cookie, if the user's browser allows it.
Third-party cookies can have legitimate uses. They can help maintain states across sessions. For example, they can provide a way to view an embedded YouTube video (the third party in someone else's website) without forcing a site visitor already logged into YouTube to navigate to YouTube, login and return.
But they can also be abused, which is why browser makers have implemented countermeasures. Apple uses WebKit's Intelligent Tracking Protection for example to limit third-party cookies. Brave and Firefox block third party requests and cookies by default.
Now finally Google has decided to do something.Welcome to the new class system
"Moving forward Chrome will make all cookies limited to first party contexts by default, and will require developers to explicitly mark a cookie as needing third-party visibility, which creates a clear distinction between first party and thir...