Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

3
  • The question aims to protect the user from having his credit card stolen (it does not aim to protect the server in any way), and only aims to save the website's reputation. Commented Sep 26, 2012 at 9:44
  • Actually, such a feature would be quite useful to protect benign users from malicious extensions. It is impossible to prevent the user from actively attacking you, but there's nothing wrong with preventing malicious extensions from reading your cookie jar without the user's knowledge. Commented Oct 9, 2015 at 2:46
  • Of course, that would only be secure on Chrome OS; on any other platform, malicious OS-level code can read the cookie jar directly, bypassing any possible protection from Chrome. Commented Oct 9, 2015 at 2:47