top | item 33021967

(no title)

qabqabaca | 3 years ago

> This made it difficult to work with separate hosts (www.my.app vs. api.my.app).

This is still possible with session cookies if you use wildcard origin cookies i.e. *.my.app

discuss

order

9dev|3 years ago

I know, contrived example. Think of www.google.com and googleapis.com. Or CORS issues. There are legitimate problems with cross-origin requests.

0x457|3 years ago

Yeah, those are issues at google's scale. Almost no one who uses them is even at half of google scale.