Suppose I have a site at http://www.example.com which has an IFRAME pointing to ASP.NET site myapp.othersite.com – this causes issues with session and 3rd-party cookies which I understand.
If I moved the embedded app to myapp.example.com, would the session cookie still count as a 3rd-party cookie as it is a different subdomain?
if you set a Cookie on domain
.example.comthen a cookie from http://www.example.com and http://www.myapp.example.com will be considered the same.
no cookie is treated as a 3rd party cookie.