Explore the intricacies of cookie management at Meta in this 16-minute conference talk from PEPR '23. Dive into the challenges of running a website with cookies, including tracking cookie usage, enforcing user consent, and maintaining consistent properties across all cookies. Learn about Meta's innovative approach to cookie management, centered around a central cookie schema and a developer-friendly API. Discover how this system allows for static declaration of cookies per domain and controlled access based on user preferences. Understand the implementation of Content-Security-Policy (CSP) headers to manage third-party cookies and embeds. Gain insights into creating a cookie infrastructure that balances ease of use for developers with strong technical guarantees for user privacy and consent.
Overview
Syllabus
PEPR '23 - Cookie Infrastructure at Meta
Taught by
USENIX