The initial RFC draft had been submitted in April 2015 [1]. It was updated multiple times [2] but eventually expired in December 2016 [3], unfortunately.
Luckily, that draft has been revived this month and updated again today [4], so that's probably the only news.
For people who need immediate support in PHP, I published a small library last June [5].
Still, the major problem today is the lack of browser support. Chrome (desktop and Android), Opera (desktop and Android) and the Android WebView have long supported this attribute, but Mozilla, Apple and Microsoft did not ship this (yet).
The initial RFC draft had been submitted in April 2015 [1]. It was updated multiple times [2] but eventually expired in December 2016 [3], unfortunately.
Luckily, that draft has been revived this month and updated again today [4], so that's probably the only news.
For people who need immediate support in PHP, I published a small library last June [5].
Still, the major problem today is the lack of browser support. Chrome (desktop and Android), Opera (desktop and Android) and the Android WebView have long supported this attribute, but Mozilla, Apple and Microsoft did not ship this (yet).
[1] https://tools.ietf.org/html/draft-west-first-party-cookies-0...
[2] https://tools.ietf.org/html/draft-west-first-party-cookies-0...
[3] https://tools.ietf.org/html/draft-ietf-httpbis-cookie-same-s...
[4] http://httpwg.org/http-extensions/draft-ietf-httpbis-cookie-...
[5] https://github.com/delight-im/PHP-Cookie