Looking for other third-party SPs that fail with stricter SameSite settings
cantor.2 at osu.edu
Thu Feb 6 19:31:03 EST 2020
> I thought you were onto something with that. SameSite is not being set for FF.
> But then I looked and it's (now) not being set for Chrome either. I could have
> *sworn* in my earlier tests it was being set to None for their main
> 'canvas_session' cookie. But it's not now for me. To confuse matters further, it
> still works in Chrome with the flags set and the lack of a SameSite (!!!!!).
Same for ours, FF fails, Chrome works (I waited 3 minutes or so).
More information about the users