if you disable all third-party cookies in your browser (like where Site A is never allowed to use cookies from Site B), have you noticed that it breaks anything?

[duncan_lithgow@mastodon.social]

@dmerej
I find I often have to log in again for different parts of the Microsoft 'experience' but that's no big deal with a password manager (#bitwarden in my case)
@oleschri @b0rk

[duncan_lithgow@mastodon.social]

@hylomorphism
Also blocked 3rd party cookies for years. I also use privacy badger.
@b0rk

[craigstuntz@discuss.systems]

@cthos @b0rk @Viss Yes, I block 3rd party cookies and I can still log in with Google to a third party site. This is probably not universally true for all SSO providers, but it does work with Google. @b0rk the main thing I've noticed which breaks (unclear if it's due to 3rd party cookies per se or some other setting I have) is embeds of tweets and Disqus.

[freddy@social.security.plumbing]

@b0rk very few pages break, I used the setting for a long while. I think webkit used to do it by default for some time, even? a good middle-ground is to do cookie-partitioning based on the first party. that's what Firefox does.

[schrotthaufen@mastodon.social]

@Viss @b0rk Last time I checked, Duo, and SSO with Entra-ID didn’t work when third party cookies were disabled, as well.

[airtower@woem.men]

@b0rk@social.jvns.ca The only thing I've seen break is MS Teams (for work, unfortunately).

[b0rk@social.jvns.ca]

@freddy thanks, I think I need to read more of your writing / talks on browser security too