Re: [PHP-DEV] [VOTE] Same Site Cookie RFC

2018-07-29 Thread Yasuo Ohgaki
On Sun, Jul 29, 2018 at 9:27 PM Andrey Andreev wrote: > Hi, > > On Sun, Jul 29, 2018 at 7:22 AM, Yasuo Ohgaki wrote: > > > > One thing regarding implementation. > > Since the internet RFC has only 2 values for "samesite", the parameter > can > > be > > bool rather than string so that users can

Re: [PHP-DEV] [VOTE] Same Site Cookie RFC

2018-07-29 Thread Andrey Andreev
Hi, On Sun, Jul 29, 2018 at 7:22 AM, Yasuo Ohgaki wrote: > > One thing regarding implementation. > Since the internet RFC has only 2 values for "samesite", the parameter can > be > bool rather than string so that users can avoid "broken security by a typo". > If "samesite" has more than 2