Browser & Web Performance · Middle · Question 63 of 75

What is the difference between same-site and same-origin?

✓Correct answer: Same-site compares the scheme and registrable domain (eTLD+1); same-origin also requires the same host and port
2They are the same thing
3Same-site compares IP addresses; same-origin compares domains

Explanation

https://app.example.com and https://api.example.com are same-site but cross-origin. SameSite cookies use the site concept.

Further reading

web.dev: Understanding "same-site" and "same-origin" ↗

Test yourself

Take the Browser & Web Performance · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.