As of ITP 2.2, persistent cookies set through
document.cookie
are capped to one day of storage when both of the following conditions are met:
- A domain classified with cross-site tracking capabilities was responsible for navigating the user to the current webpage.
- The final URL of the navigation mentioned above has a query string and/or a fragment identifier.
The rest of this blog post explores this in detail.
I’m not using the beta, but I wonder whether ITP is the source of some problems I’ve been having. I recently tried to update my billing information with GoDaddy, but got a blank white pane instead of the reCAPTCHA. This happened again after restarting Safari, but it worked when I unchecked “Prevent cross-site tracking” (and also worked in Firefox and Chrome).
I continue to have problems with bank and credit card sites (not to mention Apple’s iCloud and developer sites) not remembering that I have previously logged in.
Previously: