Skip to content

Commit f365ddc

Browse files
Apply suggestions from code review
Co-authored-by: Jared Perreault <90656038+jaredperreault-okta@users.noreply.github.com>
1 parent d58555a commit f365ddc

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

_source/_posts/2024-02-29-third-party-cookies.md

+3-3
Original file line numberDiff line numberDiff line change
@@ -18,18 +18,18 @@ type: awareness
1818

1919
Cookies are as old as the internet. Historically, cookies were among the only options for personalizing a user's online experience and carrying their preferences from page to page. First-party cookies are issued by the web site where they're used, and third-party cookies come from other domains.
2020

21-
Third-party cookies allow user behavior to be tracked across different sites. These cookies are now widely abused to collect and share users' data. For the legitimate use cases which used to require third-party cookies, like federated logins and multi-brand identity providers, more secure options are actively being developed.
21+
Third-party cookies allow user behavior to be tracked across different sites. These cookies are now widely abused to collect and share users' data. For the legitimate use cases which used to depend on third-party cookies, like federated logins and multi-brand identity providers, more secure options are actively being developed.
2222

2323
Today, the drawbacks to users' security and privacy from third-party cookie implementations outweigh their benefits so much that all major browsers are phasing them out. Safari has blocked third-party cookies for years, and Firefox retricts third-party cookies associated with trackers. Chrome is now [phasing out third-party cookies](https://developers.google.com/privacy-sandbox/3pcd) in 2024.
2424

2525
If a user has a cookie from okta.com in their browser, that cookie will count as first-party when accessed by the okta.com website, and it will count as third-party when accessed from a website on any other domain.
2626

27-
When a user logs into their Okta account in a web browser, a [session cookie](https://developer.okta.com/docs/guides/session-cookie/main/#about-okta-session-cookies) stores state information about their login session. These cookies are usually first-party, but in some situations they can be third-party. If your code uses Okta features that rely on third-party cookies, this means that you'll need to make some changes to keep the identity experience working as intended.
27+
When a user logs into their Okta account in a web browser, a [session cookie](https://developer.okta.com/docs/guides/session-cookie/main/#about-okta-session-cookies) stores state information about their login session. These cookies are usually first-party, but in some situations they can be third-party. If your application uses cookies from domains other than the ones they were issued for, you'll need to make some changes to keep the identity experience working as intended.
2828

2929

3030
## Does your Okta application use third-party cookies?
3131

32-
Okta's core features do not rely on third-party cookies. However, third-party cookies are used in several areas to enhance the login experience. Here are the design patterns in which Okta uses third-party cookies. If your application is in one of these categories, please test its behavior with third-party cookie deprecation.
32+
Most of Okta's core auth flows do not rely on third-party cookies. However, a few older flows do. And a few more, may not depend on, but use third-party cookies to enhance the login experience. Here are the design patterns in which Okta uses third-party cookies. If your application is in one of these categories, please test its behavior with third-party cookie deprecation.
3333

3434
Okta uses cookies to let applications introspect and extend user sessions. Cookies aren't required for basic login functionality.
3535

0 commit comments

Comments
 (0)