Hacker News new | ask | show | jobs
by js2 3190 days ago
Oh hey, I know this. From a commit message earlier this year for an SDK I own:

SDKSender: switch to ephemeral NSURLSession and disable cookie storage

Switch to a private (ephemeral) session independent of the app and disables cookies. The SDK otherwise shares the cookie storage with the app, which is not desired. This was causing the SDK to send the $dayjob tracking cookie (and others) to $dayjob API endpoint.