Looking for other third-party SPs that fail with stricter SameSite settings

Cantor, Scott cantor.2 at osu.edu
Thu Feb 6 19:31:03 EST 2020


> I thought you were onto something with that.  SameSite is not being set for FF.
> But then I looked and it's (now) not being set for Chrome either.  I could have
> *sworn* in my earlier tests it was being set to None for their main
> 'canvas_session' cookie.  But it's not now for me.  To confuse matters further, it
> still works in Chrome with the flags set and the lack of a SameSite (!!!!!).

Same for ours, FF fails, Chrome works (I waited 3 minutes or so).

-- Scott



More information about the users mailing list