Hacker News new | ask | show | jobs
by frio80 3299 days ago
Looks like this will stop (after 24 hours) some companies from doing an initial redirection to set cookies for tracking purposes... Example:

1. Search Google for hockey sticks

2. Click on search result hockeystick.com

3. hockeystick.com issues a 302 to adcompany.com which then issues a 302 back to hockeystick.com

Why the 302? Because in Safari, you could only access cookies in a 3rd party context if you've seen a domain in a 1st party context. Setting a cookie in adcompany.com in a 1st party context gives you the ability to read that cookie in a 3rd party context which could be used for tracking purposes.

2 comments

Woah - is this what companies that "rent" other companies' pixels like perfect audience are doing to get the pixel data?
Won't the browser show an error about a circular redirect? Or does that take a few bounces?
The URLS would be different. Companies also rewrite internal links as you're navigating a site to accomplish the same thing. Example: https://baycloud.com/thirdparty-redirect
It wouldn't be circular if the URL was different, for example:

website.com

ad.com?u=website.com

website.com?loaded