Comment Comment by tptacek No? The whole point of SameSite=(!none) is to prevent requests from unexpectedly carrying cookies, which is how CSRF attacks work. parent tptacek 10 months ago