{"id":534,"date":"2013-02-25T11:56:59","date_gmt":"2013-02-25T19:56:59","guid":{"rendered":"http:\/\/blog.mozilla.org\/privacy\/?p=534"},"modified":"2016-01-19T14:13:37","modified_gmt":"2016-01-19T22:13:37","slug":"firefox-getting-smarter-about-third-party-cookies","status":"publish","type":"post","link":"https:\/\/blog.mozilla.org\/netpolicy\/2013\/02\/25\/firefox-getting-smarter-about-third-party-cookies\/","title":{"rendered":"Firefox getting smarter about third-party cookies"},"content":{"rendered":"<p>Mozilla has a long running interest in fostering greater transparency, trust and accountability related to privacy and the many cookie-based practices we see today.<\/p>\n<p><a href=\"https:\/\/blog.mozilla.org\/netpolicy\/files\/2013\/02\/fx-nightly-v22.0a1-privacy-tab.jpg\"><img decoding=\"async\" loading=\"lazy\" class=\"alignright size-medium wp-image-585\" alt=\"fx nightly v22.0a1 privacy tab\" src=\"https:\/\/blog.mozilla.org\/privacy\/files\/2013\/02\/fx-nightly-v22.0a1-privacy-tab-252x265.jpg\" width=\"252\" height=\"265\" \/><\/a>On Friday, Mozilla released a Firefox <a href=\"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=818340\" target=\"_blank\">patch<\/a> into its <a href=\"http:\/\/nightly.mozilla.org\/\" target=\"_blank\">\u201cNightly\u201d<\/a> channel that changes how cookies from third party companies function. Users of this build of Firefox must directly interact with a site or company for a cookie to be installed on their machine. The patch also provides an additional control setting under the &#8220;Privacy&#8221; tab in Firefox&#8217;s Preferences menu (see image).<\/p>\n<p>Many years of observing <a href=\"http:\/\/www.apple.com\/safari\/features.html#security\" target=\"_blank\">Safari&#8217;s approach<\/a> to third party cookies, a rapidly <a href=\"http:\/\/www.mediapost.com\/publications\/article\/194073\/suicide-by-cookies.html#axzz2LtPOw3zE\" target=\"_blank\">expanding number<\/a> of third party companies using cookies to track users, and <a href=\"http:\/\/ovum.com\/press_releases\/ovum-predicts-turbulence-for-the-internet-economy-as-more-than-two-thirds-of-consumers-say-no-to-internet-tracking\/\" target=\"_blank\">strong user support for more control<\/a> is driving our decision to move forward with this patch.<\/p>\n<p>We have a responsibility to advance features and controls that bring users&#8217; expectations in line with how the web functions for them. As our General Counsel, Harvey Anderson, <a href=\"https:\/\/blog.mozilla.org\/blog\/2013\/01\/28\/privacy-day-2013\/\" target=\"_blank\">wrote<\/a> a few weeks ago in a post about Mozilla&#8217;s recognition as the Most Trusted Internet Company for Privacy in 2012:<\/p>\n<blockquote><p>We all have to continue our efforts \u2014 both big and small \u2014 to create a more trustworthy environment of online products that seamlessly integrate ease of use, transparency, and user choice.<\/p><\/blockquote>\n<p>In my own use of this release this morning, I followed one of my typical browsing paths, starting with a look at surfing conditions, then local news, a major national news site, and a popular site covering the tech industry. (Incidentally, all the great coverage of <a href=\"https:\/\/blog.mozilla.org\/blog\/2013\/02\/24\/mozilla-unlocks-the-power-of-the-web-on-mobile-with-firefox-os\/\" target=\"_blank\">our launch of Firefox OS<\/a> at Mobile World Congress is really exciting!)<\/p>\n<p>Here&#8217;s how the new patch changed the extent to which I was tracked:<\/p>\n<div>\n<table style=\"width: 620px;height: 166px;border: 1px solid;margin: 1px\" width=\"620\" rules=\"all\" cellspacing=\"5\" cellpadding=\"5\">\n<tbody>\n<tr>\n<td><strong>Current Default:<br \/>\nAllow All Cookies<br \/>\n<\/strong><\/td>\n<td>\n<div><strong>Proposed New Default:<br \/>\nAllow Cookies Only From Visited Domains<\/strong><\/div>\n<\/td>\n<\/tr>\n<tr>\n<td>4 web sites used 8 first party domains<\/td>\n<td>4 web sites used 8 first party domains<\/td>\n<\/tr>\n<tr>\n<td>81 cookies from first party domains<\/td>\n<td>75 cookies from first party domains<\/td>\n<\/tr>\n<tr>\n<td>117 third party domains<\/td>\n<td>0 third party domains<\/td>\n<\/tr>\n<tr>\n<td>304 cookies from third party domains<\/td>\n<td>0 cookies from third party domains<\/td>\n<\/tr>\n<tr>\n<td><strong>Total: 385 first &amp; third party cookies<\/strong><\/td>\n<td><strong>Total: 75 first party cookies<\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p>&nbsp;<\/p>\n<p>I cleared all my cookies before visiting these sites and then re-performed this process several times, as I wanted to verify that in fact four sites did lead to over 300 cookies from more than 100 companies I had not visited. Display ads and sharing widgets on the sites worked fine, and as I clicked on them, the various parties involved were able to set cookies. The privacy policies on all four sites cover their cookie practices, including from third parties. Interestingly, they all pointed me to using settings in my browser to control the behavior of these cookies on their sites.<\/p>\n<div>\n<p>Mozilla is passionate about putting its users first\u00a0and\u00a0moving the web forward. That mission requires taking a leadership role on privacy, which we have repeatedly done (e.g., <a title=\"DNT: 1 = \u201cTell sites I do not want to be tracked\u201d\" href=\"http:\/\/blog.mozilla.org\/privacy\/2011\/01\/31\/dnt-1-tell-sites-i-do-not-want-to-be-tracked\/\">Do Not Track<\/a>, <a title=\"Being social with privacy in mind\" href=\"http:\/\/blog.mozilla.org\/privacy\/2012\/10\/22\/being-social-with-privacy-in-mind\/\" target=\"_blank\">Social API<\/a>, <a title=\"Rolling Out HTTPS Google search\" href=\"http:\/\/blog.mozilla.org\/privacy\/2012\/05\/07\/rolling-out-https-google-search\/\" target=\"_blank\">Secure Search<\/a>, <a href=\"http:\/\/www.mozilla.org\/en-US\/persona\/\" target=\"_blank\">Persona<\/a> and <a title=\"The next phase of the Collusion project\" href=\"http:\/\/blog.mozilla.org\/privacy\/2012\/09\/18\/collusion\/\" target=\"_blank\">Collusion<\/a>).<\/p>\n<p>Mozilla&#8217;s users frequently express concerns about web tracking, and we&#8217;ve been listening. We are constantly challenging ourselves to deliver a browser that conforms to user expectations while facilitating online innovation. We regularly review community and partner input, web standards, extensions, practices by other browsers, and much more. The new third party cookie patch in Firefox is just another example of those efforts.<\/p>\n<p>The new default is currently only in this very early developer build of Firefox as it goes through Mozilla&#8217;s usual vetting process. As with other features we deploy, it will be several months of evaluating technical input from our users and the community before the new policy enters our Beta and General release versions of Firefox. The policy for how our current versions of Firefox handle cookies can be found <a href=\"http:\/\/support.mozilla.org\/en-US\/kb\/cookies-information-websites-store-on-your-computer\" target=\"_blank\">here <\/a>and <a href=\"https:\/\/support.mozilla.org\/en-US\/products\/firefox\/cookies\" target=\"_blank\">here<\/a>.<\/p>\n<\/div>\n<div>Mozilla loves to hear from our users about how it can make Firefox even better. We encourage all those interested to provide feedback via the <a href=\"https:\/\/groups.google.com\/forum\/?fromgroups#!forum\/mozilla.dev.privacy\" target=\"_blank\">mozilla.dev.privacy<\/a> discussion group.<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Mozilla has a long running interest in fostering greater transparency, trust and accountability related to privacy and the many cookie-based practices we see today. On Friday, Mozilla released a Firefox &hellip; <a class=\"go\" href=\"https:\/\/blog.mozilla.org\/netpolicy\/2013\/02\/25\/firefox-getting-smarter-about-third-party-cookies\/\">Read more<\/a><\/p>\n","protected":false},"author":267,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4503,847],"tags":[],"coauthors":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Firefox getting smarter about third-party cookies - Open Policy &amp; Advocacy<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.mozilla.org\/netpolicy\/2013\/02\/25\/firefox-getting-smarter-about-third-party-cookies\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Alex Fowler\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/2013\/02\/25\/firefox-getting-smarter-about-third-party-cookies\/\",\"url\":\"https:\/\/blog.mozilla.org\/netpolicy\/2013\/02\/25\/firefox-getting-smarter-about-third-party-cookies\/\",\"name\":\"Firefox getting smarter about third-party cookies - Open Policy &amp; Advocacy\",\"isPartOf\":{\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/2013\/02\/25\/firefox-getting-smarter-about-third-party-cookies\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/2013\/02\/25\/firefox-getting-smarter-about-third-party-cookies\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.mozilla.org\/privacy\/files\/2013\/02\/fx-nightly-v22.0a1-privacy-tab-252x265.jpg\",\"datePublished\":\"2013-02-25T19:56:59+00:00\",\"dateModified\":\"2016-01-19T22:13:37+00:00\",\"author\":{\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/358eb1cb37236d200971145eb96cb2eb\"},\"breadcrumb\":{\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/2013\/02\/25\/firefox-getting-smarter-about-third-party-cookies\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.mozilla.org\/netpolicy\/2013\/02\/25\/firefox-getting-smarter-about-third-party-cookies\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/2013\/02\/25\/firefox-getting-smarter-about-third-party-cookies\/#primaryimage\",\"url\":\"https:\/\/blog.mozilla.org\/privacy\/files\/2013\/02\/fx-nightly-v22.0a1-privacy-tab-252x265.jpg\",\"contentUrl\":\"https:\/\/blog.mozilla.org\/privacy\/files\/2013\/02\/fx-nightly-v22.0a1-privacy-tab-252x265.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/2013\/02\/25\/firefox-getting-smarter-about-third-party-cookies\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.mozilla.org\/netpolicy\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Firefox getting smarter about third-party cookies\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/#website\",\"url\":\"https:\/\/blog.mozilla.org\/netpolicy\/\",\"name\":\"Open Policy &amp; Advocacy\",\"description\":\"Mozilla&#039;s official blog on open Internet policy initiatives and developments\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.mozilla.org\/netpolicy\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/358eb1cb37236d200971145eb96cb2eb\",\"name\":\"Alex Fowler\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/image\/d3cc9de6ea0daec35d9304efa79ce5b9\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/83a42be0e7206a80d7e958c4ed973133?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/83a42be0e7206a80d7e958c4ed973133?s=96&d=mm&r=g\",\"caption\":\"Alex Fowler\"},\"description\":\"Alex leads privacy and public policy for Mozilla\",\"sameAs\":[\"http:\/\/wiki.mozilla.org\/privacy\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Firefox getting smarter about third-party cookies - Open Policy &amp; Advocacy","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.mozilla.org\/netpolicy\/2013\/02\/25\/firefox-getting-smarter-about-third-party-cookies\/","twitter_misc":{"Written by":"Alex Fowler","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/blog.mozilla.org\/netpolicy\/2013\/02\/25\/firefox-getting-smarter-about-third-party-cookies\/","url":"https:\/\/blog.mozilla.org\/netpolicy\/2013\/02\/25\/firefox-getting-smarter-about-third-party-cookies\/","name":"Firefox getting smarter about third-party cookies - Open Policy &amp; Advocacy","isPartOf":{"@id":"https:\/\/blog.mozilla.org\/netpolicy\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.mozilla.org\/netpolicy\/2013\/02\/25\/firefox-getting-smarter-about-third-party-cookies\/#primaryimage"},"image":{"@id":"https:\/\/blog.mozilla.org\/netpolicy\/2013\/02\/25\/firefox-getting-smarter-about-third-party-cookies\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.mozilla.org\/privacy\/files\/2013\/02\/fx-nightly-v22.0a1-privacy-tab-252x265.jpg","datePublished":"2013-02-25T19:56:59+00:00","dateModified":"2016-01-19T22:13:37+00:00","author":{"@id":"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/358eb1cb37236d200971145eb96cb2eb"},"breadcrumb":{"@id":"https:\/\/blog.mozilla.org\/netpolicy\/2013\/02\/25\/firefox-getting-smarter-about-third-party-cookies\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.mozilla.org\/netpolicy\/2013\/02\/25\/firefox-getting-smarter-about-third-party-cookies\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/netpolicy\/2013\/02\/25\/firefox-getting-smarter-about-third-party-cookies\/#primaryimage","url":"https:\/\/blog.mozilla.org\/privacy\/files\/2013\/02\/fx-nightly-v22.0a1-privacy-tab-252x265.jpg","contentUrl":"https:\/\/blog.mozilla.org\/privacy\/files\/2013\/02\/fx-nightly-v22.0a1-privacy-tab-252x265.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/blog.mozilla.org\/netpolicy\/2013\/02\/25\/firefox-getting-smarter-about-third-party-cookies\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.mozilla.org\/netpolicy\/"},{"@type":"ListItem","position":2,"name":"Firefox getting smarter about third-party cookies"}]},{"@type":"WebSite","@id":"https:\/\/blog.mozilla.org\/netpolicy\/#website","url":"https:\/\/blog.mozilla.org\/netpolicy\/","name":"Open Policy &amp; Advocacy","description":"Mozilla&#039;s official blog on open Internet policy initiatives and developments","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.mozilla.org\/netpolicy\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/358eb1cb37236d200971145eb96cb2eb","name":"Alex Fowler","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/image\/d3cc9de6ea0daec35d9304efa79ce5b9","url":"https:\/\/secure.gravatar.com\/avatar\/83a42be0e7206a80d7e958c4ed973133?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/83a42be0e7206a80d7e958c4ed973133?s=96&d=mm&r=g","caption":"Alex Fowler"},"description":"Alex leads privacy and public policy for Mozilla","sameAs":["http:\/\/wiki.mozilla.org\/privacy"]}]}},"_links":{"self":[{"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/posts\/534"}],"collection":[{"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/users\/267"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/comments?post=534"}],"version-history":[{"count":0,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/posts\/534\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/media?parent=534"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/categories?post=534"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/tags?post=534"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/coauthors?post=534"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}