Hacker News new | ask | show | jobs
by throwaway07Ju19 2432 days ago
My website has one affiliate link to Amazon page and a PayPal Buy It Now button (implemented as a form). Chrome's console message suggests I add 'SameSite=None' and 'Secure'. Any advice on where I would add those properties and if they are the right value for these type of links? I didn't realize these type of links had anything to do with cookies.
3 comments

Maybe I'm misunderstanding, but isn't the whole point that Amazon and PayPal need to update their cookies if they intend for these affiliate/pay now links to their domain to pass along their own cookies?
I don't know how AWS and Paypal affiliate links work and if they even send a cookie, or if they just send to a URL with your account ID embedded in the link. You could probably check by using the 'Network' tab in your browsers developer tools, or as other have suggested newer versions of chrome allow testing of this feature.

If there are any cookies, you will need to add SameSite=none or similar to the Set-Cookie directives for the cookies which are intended to be shared cross-domain.

I don't think this breaks your usage. Assuming those links/buttons sends the user to Amazon/Paypal, then the cookies will be 1st party.