https://nalar.dev/tags/samesite/ Recent content in SameSite on Nalar Hugo en-us Wed, 16 Sep 2026 00:00:00 +0700 https://nalar.dev/samesite-cookies-draw-a-site-boundary-that-is-broader-than-origin/ Wed, 16 Sep 2026 00:00:00 +0700 https://nalar.dev/samesite-cookies-draw-a-site-boundary-that-is-broader-than-origin/ <h1 id="samesite-cookies-draw-a-site-boundary-that-is-broader-than-origin">SameSite Cookies Draw a Site Boundary That Is Broader Than Origin</h1> <p>Two HTTPS applications can be isolated by the browser&rsquo;s same-origin policy yet still occupy the same cookie site. A service at <code>accounts.example.com</code> and another at <code>shop.example.com</code> have different origins because their hosts differ, but cookie policy can classify their request context at a broader site boundary. That gap matters when <code>SameSite</code> is treated as if it were equivalent to origin isolation.</p>