Schemeful Same-Site
DRANK
The definition of "same-site" is evolving to include the URL scheme, so links between HTTP and HTTPS versions of a site now count as cross-site requests. Upgrade to HTTPS by default to avoid issues where possible or read on for details of what SameSite attribute values are needed.
1 comments
Schemeful Same-Siteになると、同じドメイン (site) でもhttpとhttpsを跨いだcookieの送信はされなくなります