New SameSite attribute in Set-Cookie header

[Dustin Dauncey]

I wanted to let everyone know that there are some upcoming changes to the Chrome web browser that will affect the API Gateway. This post serves as one of a few notifications on this topic, to point to various resources, and ultimately to start the discussion on the SameSite attribute and it's impact on the API Gateway in case there are any questions.

• We have a new KB article already published on this topic: https://ca-broadcom.wolkenservicedesk.com/external/article?articleId=143942
• A word from one of our Product Managers: Upcoming Chrome browser changes that will impact Layer API Gateway
• Patches will be listed on this page as they become available: https://techdocs.broadcom.com/us/product-content/recommended-reading/technical-document-index/ca-api-gateway-solutions-and-patches.html

Please feel free to leave any questions on this topic in the comments below and we will do our best to answer them.

EDIT JAN 31, 2020: Google has pushed back its release of the feature in Chrome from Feb 4th to Feb 17th, buying customers more time. And according to their update text, even when it's released on the 17th it won't be for all users, it will be a slow rollout as they appear to be taking it a bit more carefully now as they realize just how much could be impacted by forcing such a requirement on users.

------------------------------
Senior Technical Support Engineer
Broadcom
------------------------------