The State of the SameSite: Studying the Usage, Effectiveness, and Adequacy of SameSite Cookies

The State of the SameSite: Studying the Usage, Effectiveness, and Adequacy of SameSite Cookies

Explore the usage, effectiveness, and adequacy of SameSite cookies in this 17-minute IEEE conference talk. Delve into the adoption of SameSite policies, functionality breakage, and potential threats such as CSRF attacks through state-changing GET and POST requests. Examine new threats like policy downgrades and the adequacy of Lax mode. Gain insights into browser inconsistencies and web framework implementations. Understand the current state of SameSite cookies and their impact on web security through comprehensive analysis and research findings presented by experts from CISPA Helmholtz Center for Information Security.