Steven Bingler

Steven Bingler

Software engineer on Chrome's Privacy Sandbox.

Schemeful Same-Site

The definition of "same-site" is evolving to include the URL scheme, so links between HTTP and HTTPS versions of a site now count as cross-site requests. Upgrade to HTTPS by default to avoid issues where possible or read on for details of what SameSite attribute values are needed.