The new SFAuthenticationSession in iOS 11 is similar to the behavior of Safari View Controller in iOS 9 and 10 that shares cookies with the main browser. For users who do not wish to have persistent cookies saved and block all cookies in Safari settings, logging in through a third party service would not have been a big issue as users can temporarily allow cookies to be saved in settings to allow authentication, after which users can delete those cookies and re-enable block all cookies and keep other cookies not manually deleted.
But this is impossible in iOS 11 as enabling blocking cookies will erase all saved cookies and data. This presents a major problem for users who wish to save specific cookies for sites frequently visited that require cookies to properly function (e.g: staying logged in to a news site to pass paywall, saving content filter settings for a search engine) while blocking all other cookies. (There’re people like me who care about privacy and the invasive tracking. We don’t want Facebook / Google to drop cookies in Safari and track everything we read.)
This is why developers should also allow the option to use Safari View Controller in iOS 11 to log in since cookies saved in SVC are not shared with the main Safari and it doesn’t respect its cookies setting. This would allow users who block cookies in main Safari to be able to complete a one-time sign-on for apps without passing through data back to main Safari to avoid cross-site tracking. More importantly, it also solves the fore-mentioned dilemma that changing cookie setting from allow to block would lose all cookies in iOS 11. Since each Safari View Controller is defaulted to accept cookies only within the scope of the associated app regardless of what the main Safari cookie setting is, there’s no need to change cookies setting and this log in will not be linked to other data across apps.
I understand SFAuthenticationSession is implemented to provide a better on-boarding experience for new users. But please also give savvy users who care about their privacy the ability to log in without forcing them to accept all cookies in main Safari settings after which they will lose all cookies when switching back to block all cookies.
Show less
Cedes_ThugPug
waddedpanties5
shpibrazz
aquino48
WillAdelson10
Hamon y queso
Cheng Qian
Tluisoscar
Agerha
Ceejay98
