[Webkit-unassigned] [Bug 188165] iOS 12 Safari breaks ASP.NET Core 2.1 OIDC authentication

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=188165

--- Comment #5 from David Cowden <dcow at eero.com> ---
(In reply to David Cowden from comment #4)
> (In reply to John Wilander from comment #3)
> > It sounds like this should be resolved as Behaves Correctly then. And bugs
> > should be opened for the other browsers.
> 
> Keep in mind RFC6265 is a draft and it appears to be expired. I'm not sure
> what WebKit's policy is with respect to IETF draft proposals. I did a quick
> search of the archives but couldn't find any discussion about revising or
> extending the draft so this may explain why other vendors don't seem to have
> implemented it yet. ...

Let me clarify. If another vendor /claims/ to support the `SameSite` attribute, and their implementations exhibits the behavior of WebKit < 12, and they are working off RFC6265, then I believe a bug should be filed against their project. 

If WebKit is okay with an implementation guided by a draft proposal, then I believe the implementation Behaves Correctly.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180925/a95d0429/attachment-0001.html>