128730 2014-02-13 02:27:17 -0800 [GTK] Broken session management in google.com and live.com 2014-05-20 09:23:04 -0700 1 1 1 Unclassified WebKit WebKitGTK 528+ (Nightly build) Unspecified Unspecified RESOLVED INVALID http://www.google.com P2 Critical --- 1 svillar webkit-unassigned cgarcia dpino gustavo mayurk.vk zan oldest_to_newest 980193 0 svillar 2014-02-13 02:27:17 -0800 Steps: 1- goto google.com 2- sign in 3- sign out Expected outcome: session is closed Actual outcome: session is still open I've tried with both WK1 and WK2, and no significant changes happened in libsoup so we must have broken the session and/or redirection code. 985502 1 mayurk.vk 2014-02-28 01:11:04 -0800 I will check this issue further, hoping not stepping on anyone's toes here. :) 985529 2 svillar 2014-02-28 03:39:53 -0800 It's also broken for MS's live.com. I'm raising the importance. 988377 3 dpino 2014-03-07 15:06:36 -0800 I reproduced the steps in google.com. I only tried WK2. I couldn't reproduce the bug. The latest commit I have is r165232. 1004426 4 mayurk.vk 2014-04-27 12:07:43 -0700 I tried the steps for www.google.com in WebkiGTK+ MiniBrowser. But could not reproduce the issue. The session is being closed properly. 1010421 5 cgarcia 2014-05-20 00:33:24 -0700 I've found the cause of this problem, it's the DoNotTrack header, and that's the reson why it doesn't happen in MiniBrowser. Try disabling the DNT setting in ephy. 1010481 6 svillar 2014-05-20 07:11:25 -0700 (In reply to comment #5) > I've found the cause of this problem, it's the DoNotTrack header, and that's the reson why it doesn't happen in MiniBrowser. Try disabling the DNT setting in ephy. Hmm, so we're getting the opposite effect, we send the DNT and as a consequence the session is never closed, so the user is tracked :) We must be doing something terribly wrong with the cookies, because I've set up Firefox to send the DNT and the session management just works. Maybe we should redirect this to epiphany though... 1010509 7 cgarcia 2014-05-20 09:23:04 -0700 Ok, so the problem is not the DNT header in the end, but the analytics removal ephy does when DNT setting is enabled. So, yes this is definitely an ephy bug.