Cookie SameSite defaulting to Lax instead of None in more and more browser - Cookie h_api_authcookie.v2 rejected in iFrame

[f2boot]

Hi

I am happy using pdf.js + hypothes.is in an iframe on the website of a learned society that produced many documents in pdf format.

I have noticed in the browser console that Cookie h_api_authcookie.v2 is rejected, most probably because SameSite now defaults to Lax instead of None. That does not seem to block the use of hypothes.is in an iframe but implementing "Secure;SameSite=None" may help and recommendations would be very nice

Many thanks