Cookie-AutoDelete: Doesn't work with Firefox's privacy.firstparty.isolate = true

With privacy.firstparty.isolate = true the cookie count is always zero and cookies are not deleted despite notification claiming that they were.

Details about the setting:

https://bugzilla.mozilla.org/show_bug.cgi?id=565965

https://www.torproject.org/projects/torbrowser/design/#identifier-linkability

About this issue

  • Original URL
  • State: closed
  • Created 7 years ago
  • Reactions: 3
  • Comments: 48 (14 by maintainers)

Commits related to this issue

Most upvoted comments

FYI: 1381197 - resolved fixed 59 an hour ago

Upstream Bug 1381197.

So, OK, this happens fundamentally because of a firefox bug. Anyway, the result is very bad for the user. For months, I’ve received popups from cookie autodelete which were stating how many cookies it was deleting. In other words, because of this [firefox] bug, the extension was lying to me.

Is it possible to add a test routine, like picking a cookie before it is deleted, and checking after deletion whether it is still present? If the cookie is still present, the extension could warn the user that at least something is wrong (with some RTFM link) instead of poping up “cookies deleted”, or at least after poping it out. This would give the user a chance to notice things are wrong. And it would help detect other future similar occurrences of the same problem.

The current state of things, with this firefox bug, is that the user believes to be safe, and isn’t. Worst possible state.

My last sentence needs to be : thanks for this great extension.

@thiswillbeyourgithub : I can’t definitely answer your question. But: As an alternative you can disable privacy.firstparty.isolate and install the add-on Temporary Containers instead. When its Automatic Mode is enabled (which is the default) it opens every tab in a temporary container. This seems to work very well. And all cookies are deleted by C-AD as expected. Cool!

Works just flawlessly for me with 59b3 without any containers and with privacy.firstparty.isolate = true.

OK, did a brief testing in FF59b3 and it seems to be working. When pfi = true is set then CAD does delete cookies (& notifies you) you eg. when closing a Tab

But cookie cleanup should still work.

Ah, perfect! That is working for me.

So are you still seeing notifications that it gets deleted?

I’m not seeing notifications in the first case where the error came up, however I do get them when using the cookie clean up

@thiswillbeyourgithub unless they backport the patches to 58, correct.

Nightly (currently 59) is where they add new features. Stable (currently 57) only gets patches for critical items (such as the timing mitigations in 57.0.4 against Spectre).

When Nightly moves to 60, 59 becomes the beta channel. And again, more testing, at least a release cycle’s worth. When 59 becomes stable, then there should be no issues.

This pattern also gives devs like mrdokenny to start coding and testing so his fixes will be ready in time. So yeah, Release Calendar says we can expect this on March 13

Yes, to turn around the bug, you need to do the following

  1. Make sure you disable privacy.firstparty.isolate in about:config
  2. Delete all existing cookies by hand

Then the extension works like a charm for all newly created cookies.