http-extensions
http-extensions copied to clipboard
Make Lax-by-default optional
RFC6265ter already aims to make lax-by-default optional because in the absence of a SameSite attribute Firefox defaults to None and I'm told that Safari also defaults to None as well. It might be nice to include this as optional in 6265bis as well.
(Sorry for the lateness of this issue)