Hacker News new | ask | show | jobs
by Xylakant 2969 days ago
I have it enabled and I can attest that it breaks a fair amount of sites. I think it’s fair to expose that as an expert level setting. It could benefit from a bit of advertising though.
1 comments

I wonder if it can be implemented on a per-site basis, like a security policy.

Exception: gitea uses Github oauth

Exception: unbury.me uses Google login

etc

Default: Full FPI

This is extremely easy to do in uMatrix. If you don't want to use the other features, just set a default policy of allow all, then block third party cookies. You can then selectively allow access to cookies on a site by site basis.
Good point. So the technology is there, and an "expert" UI.

It would be neat to see Mozilla create an intuitive UI for this to enable first party isolation by default, like a permissions model for other things. A modal popup "Unbury.me wants to grant access to google.com", for example.