You think the average user is going to explicitly whitelist? The law requires sites to whitelist their own cookies under penalty of law, instead.
> You think the average user is going to explicitly whitelist
When prompted by the browser on first login/signup, yes, the same way the password manager works. With stored passwords, keeping the login cookie doesn't even add much value.
> You think the average user is going to explicitly whitelist
When prompted by the browser on first login/signup, yes, the same way the password manager works. With stored passwords, keeping the login cookie doesn't even add much value.