
Security & Privacy
One session cookie across every subdomain
Why the session cookie uses __Secure- rather than __Host-, why SameSite=Lax is enough, and the rule it forces on the whole domain.
1 min
1 post.

Why the session cookie uses __Secure- rather than __Host-, why SameSite=Lax is enough, and the rule it forces on the whole domain.
PaceStreak is a habit and streak tracker for training and everything else worth doing regularly.