394651 - Set "Accept cookies only from sites I visit" as default

Status: RESOLVED FIXED

(Camino Graveyard :: Preferences, defect)

Description

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

Attachment: patch

There are apparently some small privacy and security wins from doing this (see bug 324397); it's not a panacea, but it helps some.  

So far the only thing it seems to break is Tp on the tinderbox :p (if we do want this, we need to keep an eye on whatever changes are needed to keep Tp running).

Comment 1

[Chris Lawson (gone)]

I'd be in favour of this; why aren't we doing this already?

Comment 2

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

Probably because it can break some sites that try to set 3rd-party cookies; I gather from the Firefox bug that this is less common now than it used to be.  I think I've seen one case of this in the past 3 years myself....

Comment 3

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

Safari 3 also does this by default.  Firefox is taking another try at landing this soon....

Comment 4

[Chris Lawson (gone)]

Comment on attachment 279354 [details] [diff] [review]
patch

r=me. Per the meeting today, we should wait to land this until Core figures out the Tp problems, but we definitely want to do it.

Comment 5

[Mike Pinkerton (not reading bugmail)]

Comment on attachment 279354 [details] [diff] [review]
patch

sr=pink

Comment 6

[[e-mail]]

Core has figured out its Tp problems, this is free to land at your pleasure. (I'll be relanding the firefox fix.)

Comment 7

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

Landed on the trunk.  Per the discussion at recent meetings, if Core ever picks up NSPR with the dependent fix in it, we'll take this on the branch.