[tor-talk] Observation re gmail/google cookies

Geoff Down geoffdown at fastmail.net
Sun May 18 01:24:51 UTC 2014



On Fri, May 16, 2014, at 01:57 AM, grarpamp wrote:
> Is used to be such that only the mail.google.com:GX
> cookie was required to access webgmail (even if it added
> a number of other cookies post that access, they could be
> reasonably narrowed down and blocked to just mail.google.com,
> if I recall). Now within the past many months that has changed
> to include, at minimum, myriad cookies in google.com. (I've
> not tested which are the minimum set). These will potentially
> cross with ads and other tracking things. While great for
> google integration, it's bad for user privacy regarding
> domain/usage segregation. Do not trust the google in your
> browser anymore. As if, ever, obviously.
> -- 

I get by with allowing mail.google.com and accounts.google.com cookies
to log in to webmail. Although some .google.com cookies are also stored,
they are not sent when accessing google.com or www.google.com. They
*are* sent when accessing mail.google.com again (or at least one of them
is, not sure why just the one).
GD

-- 
http://www.fastmail.fm - Or how I learned to stop worrying and
                          love email again



More information about the tor-talk mailing list