Is it possible to share a cookie cross-site?

Question

The question is simple.
e.g.: How does Google do when you login on mail.google.com (google.com domain), and then you go to youtube.com and your Google account is already open.

Thank You.

you can use domain names like `.google.com` so all sites with host name ending with `.google.com` will get these cookies — Arun P Johny, Mar 23 '13 at 05:26
http://stackoverflow.com/questions/263010/whats-your-favorite-cross-domain-cookie-sharing-approach — , Mar 23 '13 at 09:39

score 2 · Accepted Answer · answered Mar 23 '13 at 05:30

2

When logging in to Gmail, a redirect first takes you to https://accounts.google.com.au/accounts/SetSID?... and then to https://accounts.youtube.com/accounts/SetSID?... so two separate sets of cookies are set. Then another redirect gets you back to Gmail. Same thing happens on logging out.

If you then delete all cookies for youtube.com, you will still be logged in to Gmail but not Youtube.

answered Mar 23 '13 at 05:30

Koterpillar

7,883
2
25
41

Thank you. I didn't notice it was that rudimentary. – Pablo Mar 28 '13 at 18:41

Is it possible to share a cookie cross-site?

1 Answers1