On: Cookies Lack Integrity: Real-World Implications

[AdmiralAsshat]

I haven't dug around my browser config or the Extensions store in awhile. Does anyone happen to know if IE/Chrome/Firefox can be configured to not accept cookies from non-HTTPS sites?

[paulsutter → AdmiralAsshat]

Chrome plug-ins have a lot of control over network requests through the webRequest API[1]. They're easy to write - email me if you have questions.

[1] https://developer.chrome.com/extensions/webRequest

"Use the chrome.webRequest API to observe and analyze traffic and to intercept, block, or modify requests in-flight"

[jonknee → AdmiralAsshat]

Doesn't look like you can in Chrome, at least without a custom extension. They control it based on hostname:

https://support.google.com/chrome/answer/3123708