cross-site cookies *should* only be available in the same top-level context

that the cookie was first set in. For this to be accepted by the user agent,

you **must** also set ``Secure``.

In addition, it is recommended to use the ``__Host`` prefix when setting

partitioned cookies to make them bound to the hostname and not the

registrable domain. Read