if you disable all third-party cookies in your browser (like where Site A is never allowed to use cookies from Site B), have you noticed that it breaks anything? What breaks?
@b0rk Websites that interact via CORS with others, under different domains, sharing the same OAuth entity. I cannot send the auth cookie to this other website.