@SweetP said in Safari HSTS cookies not being deleted [Cookie v5.9.6, Safari v12.1 (14607.1.40.1.4), macOS 10.14.4 Beta (18E220a)]:

nice one,
Ill get an official update sorted out

Super! Thanks for getting to the bottom of it! Cheers!

As an aside, I used SessionRestore to get all my pinned tabs back. Something for the wish list would be the ability to restore the tabs to their pinned state. Another great feature would be a way to bulk unpin and/or close pinned Safari tabs. Are these types of things programmatically possible, or does Apple preclude this type of tab management?

@SweetP said in Safari HSTS cookies not being deleted [Cookie v5.9.6, Safari v12.1 (14607.1.40.1.4), macOS 10.14.4 Beta (18E220a)]:

ok,

can you try changing the contents of the file clearSafariCacheMojave.sh

to this:
#!/bin/sh

/usr/bin/killall -KILL nsurlstoraged
find /private/var/folders \! -name "*SafariTechnologyPreview*" -name "*com.apple.Safari*" -exec rm -r {} \; 2>/dev/null

then quit Safari and clear the cache

Fantastic, the HSTS items are gone!

Prior to getting your last message, I decided to delete all my Favorites and close all pinned tabs to eliminate those things from consideration. One of my Favorites was netflix.com, and prior to making the change to the shell script file, the only things under Manage Website Data were 5 HSTS items and a netflix.com Media Keys item. The Media Keys item is still there after the change to the shell script fyi.

@SweetP said in Safari HSTS cookies not being deleted [Cookie v5.9.6, Safari v12.1 (14607.1.40.1.4), macOS 10.14.4 Beta (18E220a)]:

you still need to restart Safari after removing the cache. did you also do that?

Yes. As I said, I run Cookie before I close the browser, then check Manage Website Data and note that the HSTS items are there. I then close the browser, run Cookie again so that Remove Now is greyed-out out for Tracking Cookies, Non-Favorites and Cache, and then re-open the browser. Before opening any tabs, I check Manage Website Data, and note that the same pesky HSTS items are still there.

I'm sorry to report that I tried doing both...modifying the shell script file and then installing the beta, but neither succeeded in removing the HSTS Policy items.

P.S. I forgot to mention earlier that I also use ColorWell! Good stuff!

First off, I'm on to Mojave 10.14.5 Developer Beta 1 (18F96h) that installs Safari 12.1.1, and I'm still experiencing the same thing with HSTS cookies.

I'm not sure how to determine if Safari is regenerating the HSTS cookies or Cookie is not ever deleting them. Maybe I'm being daft, and if so, I apologize.

Here’s what I’m doing. Before I close Safari, but after I use Cookie 5.9.6 to delete tracking cookies and non-favorites, these HSTS cookies are there under Manage Website Data. I then close the browser and use Cookie to remove the Cache. Remove Now is greyed out for Cache, Tracking Cookies and Non-Favorites. I then reopen Safari, and before I open any tabs, I check under Manage Website Data, and the HSTS Policy cookies are there. So how do I know if Cookie deleted them and Safari regenerated them or if Cookie never deleted them at all? Either way, they are still there and I can’t rely on Cookie to manage them for me.

It's probably no huge deal, but I would feel better knowing that I don't have some bit of info stored on my computer that could be theoretically used in some way by the likes of google, facebook, pinterest, etc. If I have to remember to deal with this manually, it won't be the end of the world. I will remain a proud Cookie user, and continue to use your other great products like SessionRestore and DesktopUtility. I'm a big fan of your work. Cheers!

I wanted to report that I've upgraded to the final public release version of Mojave [macOS 10.14.4 (18E226)], and I'm still seeing HSTS Policy cookies that are not being deleted by Cookie 5.9.6 in Safari 12.1. Note that Safari 12.1 was apparently also updated in the most recently released Mojave version.

Well, this isn't good. One of my most hated nemeses, google, survived my most recent cookie/cache removal by Cookie. As did avast, geico, live.com, and a few others not shown on this screen shot.

I just checked Opera as well, but it appears to be working correctly.

It's working fine for me except I've noticed that some HSTS policy cookies are not being deleted when the cache is removed. I've started a separate thread for this.

Yes, cache removal is enabled. I'm a long time Cookie user, and love the app as I'm obsessive-compulsive about cookies and tracking, especially by social media sites and google, so I'm constantly monitoring my cookies. I consider myself an advanced user, and manually enter the main window often to check on the status of my cookies. The only thing I auto-delete are tracking cookies (every 5 minutes), but I probably completely close my browsers (I mainly use Safari, but occasionally Opera) at least once an hour, use Cookie to delete any undeleted tracking cookies, non-favorites, and the cache, and re-open the browser when needed. About once a week, I close all pinned tabs in my browsers, and do a complete removal of all browser data including history, favicons, form values, etc., including favorites, so I can have a fresh start. For some time, I've started going into Safari>Preferences>Privacy>Manage Website Data as soon as I re-open the browser to double-check that everything I want deleted by Cookie has in fact been deleted. I've noticed that Cookie is missing some of the non-favorite HSTS policy cookies even though the app is showing Cache Remove Now as greyed out before I open the browser. I then manually delete the HSTS cookies. These HSTS cookies are not coming from pinned tabs by the way. It's not a huge deal, but something that anal me wanted to bring to your attention.

I've just installed Opera in the last couple of days due to some site-specific difficulties I'm having with Safari, so I'm unsure if the same thing is happening there or not. I'll try to take a look see.

Thank you for your wonderful product that provides psychological comfort to someone like me.

For some time now, I've noticed that Cookie is no longer deleting HSTS cookies, and I'm having to do this manually. Is this a known issue with Safari 12.1?