SameSite
Also called: SameSite attribute
A cookie setting (Strict, Lax or None) that controls whether a cookie is sent on requests from other sites.
Definition
It helps protect against cross-site attacks. Lax is a common default; None requires the Secure flag. Wrong settings can also break legitimate logins from other sites.
In practice
After a bank redirects back from 3-D Secure, the shop logs you out because its session cookie is SameSite=Strict.