On: Firefox 85 cracks down on supercookies

[aembleton]

No, this won't defeat CSRF attacks.

All this does is create a separate cache for each site, so that they can't infer that a user has already been to another site. It makes no changes to POST/PUT/PATCH requests to an endpoint. They will still be going there.

[arendtio → aembleton]

Okay, I thought it would also keep the browser from sending cookies/authentication data, it received via another origin.