Google na da niyyar daina tallafawa kukis na ɓangare na uku a cikin Chrome nan da 2022

Google sanar game da niyyar dakatar da tallafin kukis na ɓangare na uku gaba ɗaya a cikin Chrome cikin shekaru biyu masu zuwa, waɗanda aka saita lokacin shiga rukunin yanar gizo ban da yankin shafin na yanzu. Ana amfani da irin waɗannan kukis don bin diddigin motsin mai amfani tsakanin shafuka a cikin lambar sadarwar talla, widgets na hanyar sadarwar zamantakewa da tsarin nazarin yanar gizo.

Kamar ya bayyana jiya aniyar haɗe kan taken mai amfani-Agent, ƙiyayyar Kukis na ɓangare na uku ana haɓaka a matsayin wani ɓangare na shirin. Sirrin Sandbox, da nufin cimma daidaito tsakanin masu amfani' buƙatar kiyaye sirri da sha'awar cibiyoyin sadarwar talla da shafuka don bin abubuwan da baƙi ke so. Har zuwa karshen wannan shekara a cikin yanayin gwaji na asali ana sa ran za a haɗa su a cikin mai binciken ƙarin APIs don auna juyawa da keɓance talla ba tare da amfani da kukis na ɓangare na uku ba.

Don ƙayyade nau'in sha'awar mai amfani ba tare da gano mutum ba kuma ba tare da la'akari da tarihin ziyartar takamaiman rukunin yanar gizo ba, ana ƙarfafa cibiyoyin sadarwar talla suyi amfani da API taro, don kimanta ayyukan mai amfani bayan canzawa zuwa talla - API Ma'aunin Juya, da kuma raba masu amfani ba tare da amfani da masu gano giciye ba - API Amintaccen Token. Haɓaka ƙayyadaddun bayanai masu alaƙa da nunin tallan da aka yi niyya
ba tare da keta sirri ba, za'ayi kungiyar aiki daban, wanda ƙungiyar W3C ta ƙirƙira.

A halin yanzu, a cikin mahallin kariya daga watsawar Kukis lokacin hare-haren CSRF Ana amfani da sifa ta SameSite da aka ƙayyade a cikin saiti-Cookie, wanda, farawa daga Chrome 76, an saita shi ta tsohuwa zuwa ƙimar "SameSite = Lax", wanda ke iyakance aika kukis don shigarwa daga rukunin yanar gizo na ɓangare na uku, amma shafuka zasu iya. soke ƙuntatawa ta hanyar saita ƙimar SameSite=Babu lokacin saita Kuki . Siffar SameSite na iya ɗaukar dabi'u biyu 'matsattse' ko 'lalata'. A cikin yanayin 'tsattsauran ra'ayi, ana hana kukis aika don kowane irin buƙatun giciye. A cikin yanayin 'lax', ana amfani da ƙarin ƙuntatawa na annashuwa kuma ana toshe watsa kuki don buƙatun rukunin yanar gizo kawai, kamar buƙatun hoto ko loda abun ciki ta hanyar iframe.

Chrome 80, wanda aka tsara don 4 ga Fabrairu, zai aiwatar da ƙarin ƙaƙƙarfan ƙuntatawa wanda zai hana sarrafa Kukis na ɓangare na uku don buƙatun ba tare da HTTPS ba (tare da SameSite=Babu sifa, Kukis ɗin kawai za a iya saita shi a cikin Amintaccen yanayi). Bugu da ƙari, aikin yana ci gaba da aiwatar da kayan aiki don ganowa da kariya daga amfani da hanyoyin bibiyar ƙetare da ɓoye ɓoye ("bincike yatsa").

A matsayin tunatarwa, a cikin Firefox, farawa da saki 69, ta tsohuwa, Ana yin watsi da kukis na duk tsarin bin diddigin ɓangare na uku. Google ya yi imanin cewa irin wannan toshewar ya dace, amma yana buƙatar shiri na farko na tsarin muhalli na Yanar Gizo da samar da madadin APIs don magance matsalolin da aka yi amfani da kukis na ɓangare na uku don su a baya, ba tare da keta sirri ko lalata tsarin samun kuɗi na shafukan da ke tallafawa talla ba. Dangane da toshe kukis ba tare da samar da madadin ba, hanyoyin sadarwar talla ba su daina bin diddigin ba, amma an ƙaura zuwa mafi ƙwararrun hanyoyin da suka danganci zana yatsa ko ta hanyar. halitta don mai lura da ƙananan yanki na otal a cikin yankin rukunin yanar gizon da aka nuna tallan akansa.

source: budenet.ru

Add a comment