A Deep Dive Into SameSite Cookies - What They Are and Why They Matter

Explore the intricacies of SameSite cookies in this 42-minute conference talk from NDC Sydney 2020. Delve into the importance of SameSite cookies for website security, understanding their attributes and optimal usage. Learn about the Chrome team's plans to implement 'SameSite=Lax' as a default setting and its potential impact on web development. Discover how to properly configure SameSite attributes to enhance security without compromising functionality. Examine edge cases, potential bugs, and the differences between 'Strict', 'Lax', and 'None' settings. Gain insights into cross-site request forgery attacks, CSRF protection, and the concept of same-site domains. Witness browser demonstrations, explore testing tools, and understand the implications of SameSite cookies across different browsers. By the end of this talk, acquire the knowledge to effectively implement SameSite cookies and stay ahead of upcoming web security changes.