HSTS SuperCookies and Safari
-
I have read your Blog-Post
http://sweetpproductions.com/blog/?p=1069
Very interesting! Looking forward to check, how Cookie preserves privacy again. One Question in advance:
What is with Safari, if iCloud is inactive? Does it work then?Cheers,
Pete -
Even with safari disabled in iCloud it still doesn't work without a computer restart....
Maybe it's not even iCloud that re synchs the file... -
Even with safari disabled in iCloud it still doesn't work without a computer restart....
Maybe it's not even iCloud that re synchs the file...I'm very pleased this option is available, but I'm very confused about your implementation. Is there somewhere this is explained further and shows the process in Safari?
For example, I'd like to get rid of HSTS SuperCookies in Safari with Cookie 3.5, but I don't see the option available anywhere to do so in the application.
Where is the option to do this in Cookie 3.5 for Safari?
-
All you need to do, is to configure "Browser Cache" as unwanted data.
Ive just updated to 10.10.2, and it seems you still need to restart your computer for Safari to be cleared of the HSTS cookies permanently....
-
All you need to do, is to configure "Browser Cache" as unwanted data.
Ive just updated to 10.10.2, and it seems you still need to restart your computer for Safari to be cleared of the HSTS cookies permanently....
Thank you for the info! Does this work at all for Snow Leopard 10.6.8 with Safari 5.1.10 at all or is it even needed in that case?
Also, is there a way for the user to confirm when the HSTS cookie are removed after restart? Also, any way to see which sites they're coming from?
-
you should be fine on Snow Leopard. the HSTS regeneration only happens on Yosemite, and Mavericks i believe.
test it out with this page:
http://www.radicalresearch.co.uk/lab/hstssupercookiesmake sure to enable cache removal in your Cookie preferences.
-
you should be fine on Snow Leopard. the HSTS regeneration only happens on Yosemite, and Mavericks i believe.
test it out with this page:
http://www.radicalresearch.co.uk/lab/hstssupercookiesmake sure to enable cache removal in your Cookie preferences.
Thank you for the response. It doesn't even generate anything. Come to think of it, I tested it somewhere else and it gave me a unique number, but when I went back later the number changed so I'm not sure there are HSTS cookies possible in Snow Leopard with Safari?
Then again I'm also running Javascript Blocker, Adblock, etc. in Safari so maybe that's doing something to thwart it.
-
just for reference, HSTS cookies are no longer retained in Safari 8.0.4+
so, a computer restart is no longer necessary.
