this post was submitted on 04 Jan 2024
152 points (90.4% liked)
Technology
59605 readers
4202 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
You don't need cookies to keep track of the state. JavaScript can do that without cookies, 3rd party clients can do that without cookies.
Still, the use of cookies as key elements used to persist client session identifiers in the browser is too widespread and relied upon by prevalent web powerhouses like PHP for Google to do away with them.
Moreover, as much as there may be more modern, sleek alternatives like browser session and application storage, you can't realistically expect the entire web industry to completely migrate away from cookies just like that.
deleted
They definitely used to, but haven’t for a long time. It’s been viewed as an unreliable and poor practice, especially with browsers like Safari and Firefox which have already disabled 3rd Party Cookies for some time now (or at least providing the option to, as a privacy feature).
Now CORS, OAUTH, and similar mechanisms do a better, more private, and more secure job of sharing state and authentication across domains and groups of services.