How does Stack Overflow share token across different domains?
There is stackoverflow.com and there is stackexchange.com and its different domains, so token sharing is not easy... How does Stack Overflow handle this when multiple domains are involved?
Is it using an iframe strategy? https://developer.mozilla.org/en-US/docs/Web/API/Window/postMessage
Or else, does it have any other strategies?
*.<site>.com
, which means logging on on any *.stackexchange.com sites logs you on for all those sites, but not stackoverflow, superuser, askubuntu, or any other sites (if there are any) with custom names. Open the developer console in your browser (might be at F12), go to storage, find cookies. Global cookies apply to.stackoverflow.com
, one is limited to a specific domain (not sure what it does)