Hacker News Reader

I turned it off once and the most common breakages were usually authentication that involves some kind of OpenID delegation.

View on HN

Yeah, we (Azure AD) got a couple of "login is broken" escalations when Chrome made this change. A couple vendors use it to validate a request is coming from the upstream IDP, to block drive by attacks I assume.

Reply on news.ycombinator.com