Third-party cookies: can't store be blocked? Brave browser approaches the projectile

Since the first release, Brave has been implementing the most aggressive policy of all browsers regarding third-party cookies and other data - we make third-party storages (both cookie storage and localStorage / indexedDB) unavailable by default. However, entering with such a trump card not only powerfully increases the level of user privacy, but also breaks a lot of sites. Here's our recipe for storing, sorting and issuing cookies.

No third-party entry is allowed

, , — (-, third-party) : , localStorage . . , , , , .

, — , . : . , - — . , ( chrome://settings/siteData)

C shop.com, school.edu bank.ru <img src=”https://trackingcorp.com/track.gif”>. , trackingcorp.com . , , trackingcorp .

, . , . , , .

( ) «»  — , , , . .

- , , , .

1. (, . .) . Brave (, sub.habr.com), cross-origin (, evilcorp.com/tracking_pixel.gif), .

   
   
   
   
   

2. ( , ) . , , , localStorage sessionStorage API ( API , , ), . , trackingcorp.com example.org other.org, : trackingcorp.com + example.org, trackingcorp.com + other.org. , ( localStorage) trackingcorp.com.

   
   
   
   
   

3. . , first.example.org second.example.org, YouTube. . YouTube- other.org YouTube — example.org , , .

   
   
   
   
   

4. first-party , . , , , . , . — , .

   
   
   
   
   

5. . , , . Brave, .

   
   
   
   
   

localStorage, indexedDB API — , Storage Access API ( Chromium Edge).

?

— Safari Tor Browser, . Safari, Brave , , — .

( , ) Firefox. Chromium — , . C 2019 Firefox , . Chromium — , .