In <news:i5udnddvg6jvvxbjnz2dnuu7-qmdn...@mozilla.org>,
"Paul B. Gallagher" <pau...@pbgdashtranslations.com> wrote:

> This evening, I cleared all private data (including cache and
> cookies), and then visited nhl.com.
> 
> Immediately after aborting their troublesome javascript,* I inspected
> my cookies and discovered that google.com had set a cookie.
> 
> Now, my cookie policy at Edit | Preferences | Privacy & Security | 
> Cookies is "Allow cookies for the originating website only (no 
> third-party cookies)."
>
> So how was Google able to set a cookie if I never visited their site?

My first guess is that it's the Google "safebrowsing" cookie.  The
browser connects to Google to get its lists of bad sites.  After reports
that the NSA was using the Google safebrowsing cookie to track people,
Mozilla took a look at blocking the cookie, but AIUI it turned out that
the safebrowsing API requires a cookie in order to work at all.  It
looks like they decided to sandbox the cookie somehow;  I don't
understand the details.  I think they also got Google to promise never
ever to use it for tracking or building dossiers.  FWIW, the bugs are

<https://bugzilla.mozilla.org/show_bug.cgi?id=368255>

<https://bugzilla.mozilla.org/show_bug.cgi?id=897516>
 
> It's bad enough that they update their dossier on me when I visit
> their own sites, do they have to do it everywhere else, too?\
> 
> More to the point, how can I set SeaMonkey to do as it says and block 
> third-party cookies?

If my guess is right, turning off the safebrowsing features should do
it.  I dunno where they are in the SM UI.
_______________________________________________
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey

Reply via email to