Hacker News new | ask | show | jobs
by huhtenberg 2366 days ago
Expecting first-party cookies to work is a reasonable assumption on site's developers part. Blocking these is rarely well-justified, so supporting this case is largely pointless.

Session cookies is a perfectly fine option that eliminates the need to pass the session id in each every URL. Sticky cookies are also something that most people will actually want because it helps improving the UX on the site on return visits. If you don't want either, in principle, clear them. This can be trivially automated in a wide variety of ways.

* That said, I agree that the site rendering shouldn't depend on the cookie access. But it's almost certainly an oversight of not testing for a marginal case that vanishingly few people have. So loudly moaning about it looks very odd - you are complaining about something that nobody needs. Just like a website not rendering well in Lynx.

1 comments

Not all browsers, on all devices, make it trivial to set cookie permissions so flexibly. And, as I said, it's not just about cookies, but also about LocalStorage and such APIs--which, historically, if not presently, do not always behave as desired with regard to clearing data. Forgive me for not wanting to grant all sites the permission to use them automatically.

I'm sure that, to many such webmasters (may I use that term?), I am indeed a nobody. Still, the Web is worse for it--a significant regression in usability and compatibility. Feel free to ignore my "loud moaning"--maybe the OP will appreciate the bug report.

A bug report would've said - The site doesn't render if the first-class cookies are disabled.

The way you phrased it was different, both in spirit and in intent. Hence the "moaning" qualifier.