Privacy

A browser cookie constrained by host, path, transport, and same-site boundaries.

Cookie scope should be narrower than the application boundary

A cookie sent to more hosts or paths than necessary enlarges the impact of every mistake at those boundaries.

August 23, 2026 · 2 min · XB Field Notes