Re: [w3ctag/design-reviews] HTTP State Tokens (#297)

Assuming `same-site` means same origin (does it?), I think (2) above addresses part of the concern.  But the point about active versus passive seems related to things like the [Lightbeam](https://addons.mozilla.org/firefox/addon/lightbeam/) (formerly Collusion) Firefox extension that aims to show how sites are collaborating with each other in tracking the user.  If the tracking happens automatically without any opt-in from the site, then it becomes harder to show what tracking is happening.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3ctag/design-reviews/issues/297#issuecomment-434735228