Skip to content

Conversation

@svendlarsen
Copy link
Contributor

@svendlarsen svendlarsen commented Jul 8, 2024

Namely, when deleting cookies for a host:

  • Preserve cookies for that host partitioned under other sites, but
  • delete cookies partitioned under sites with that host.

And change non-cookie storage deletion:

  • from looking at the storage key's origin
  • to looking at the storage key's top-level site.

Fixes #75.


Preview | Diff

Copy link
Collaborator

@jyasskin jyasskin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks good enough from a spec point of view, but I'd also like @bvandersloot-mozilla to confirm that this fixes his bug report.

Copy link

@bvandersloot-mozilla bvandersloot-mozilla left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍 This resolves the issue.

Copy link
Member

@johannhof johannhof left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

So, I think overall, the way we'd rather do this in the future is to expose some interface for this in the cookies RFC (which defines the cookie store) as web platform specs don't necessarily have direct introspection into the cookie store. @annevk any thoughts?

With that said, I acknowledge that we're not fully there yet and so I'm okay with this as I think it's sketching out the correct steps. We can add this to the list for cookie layering work...

@wanderview
Copy link
Collaborator

I think this PR also needs to specify the deletion of partitioned non-cookie storage. If non-cookie storage partitioning is not specified adequately yet we should at least add a note indicating that is the intent.

@svendlarsen svendlarsen changed the title Specify handling of partitioned cookies in deletion Update spec for cookie partition keys and partitioned storage keys Jul 22, 2024
@svendlarsen
Copy link
Contributor Author

It seems like we've reached agreement on this change, at least given the current state of related spec/standard changes. I'm going to merge; please note any new concerns by filing an issue. Thanks all for your input!

@wanderview
Copy link
Collaborator

I think you need to drop the phantom link to the top-level site for the partition key. Getting this failure on trying to submit:

image

@wanderview wanderview merged commit 1fa286a into privacycg:main Jul 22, 2024
github-actions bot added a commit that referenced this pull request Jul 22, 2024
SHA: 1fa286a
Reason: push, by wanderview

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
amaliev pushed a commit to amaliev/nav-tracking-mitigations that referenced this pull request Oct 18, 2024
…rivacycg#78)

* Specify handling of partitioned cookies in deletion

* Add refs for paritioned cookies and domain attribute

* Correct partition key matching description

* Rename cookie clearing algorithm for clarity

* Revert "Rename cookie clearing algorithm for clarity"

This reverts commit 045d4bd.

* Document host precondition in cookie-clearing algorithm

* Handle non-site info in cookie partition keys

* Add dfn links for `continue`

* Handle partitioned non-cookie storage in deletion

* Drop phantom link to storage key top-level site
amaliev pushed a commit to amaliev/nav-tracking-mitigations that referenced this pull request Oct 18, 2024
…rivacycg#78)

* Specify handling of partitioned cookies in deletion

* Add refs for paritioned cookies and domain attribute

* Correct partition key matching description

* Rename cookie clearing algorithm for clarity

* Revert "Rename cookie clearing algorithm for clarity"

This reverts commit 045d4bd.

* Document host precondition in cookie-clearing algorithm

* Handle non-site info in cookie partition keys

* Add dfn links for `continue`

* Handle partitioned non-cookie storage in deletion

* Drop phantom link to storage key top-level site
amaliev pushed a commit to amaliev/nav-tracking-mitigations that referenced this pull request Oct 18, 2024
…rivacycg#78)

* Specify handling of partitioned cookies in deletion

* Add refs for paritioned cookies and domain attribute

* Correct partition key matching description

* Rename cookie clearing algorithm for clarity

* Revert "Rename cookie clearing algorithm for clarity"

This reverts commit 045d4bd.

* Document host precondition in cookie-clearing algorithm

* Handle non-site info in cookie partition keys

* Add dfn links for `continue`

* Handle partitioned non-cookie storage in deletion

* Drop phantom link to storage key top-level site
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Delete CHIPS cookies

6 participants