[03:03:44] Krinkle: SSO domain self-links that I can think of off the top of my head: form action, login->signup switch, language selector, mobile/desktop switch, (eventually) password reset [03:05:30] maybe captcha image URLs - those don't need the session to work, but maybe for debugging / ad hoc security patches it's more convenient if they have access to it [03:07:29] cookiestatus.com is cool but hasn't been updated for a while. (TBF not sure if anything changed in the last year, other than the Chrome 1% rollout.) [03:08:12] My impression was the Chrome delay is due to pressure from the UK antitrust regulator.