[SelfProtection]

Originally Posted by rryles

In relation to the recent press and phorm comments about turning off cookies:

Phorm seem to have a very simplistic view of cookie permissions. Yes you can turn cookies off. Yes you can allow all cookies. However, there are many shades of grey between these two extremes. You can set permissions based on 1st/3rd party, session/persistent, expiration time and domain (with either a white list or black list). Every browser I know allows some settings between on and off. There are also add ons for many of them to improve this functionality.

The Probable reason Phorm is complaining cookies need to be allowed by the Browser by default (even if the user maintains a White Blacklist etc), or the Phorm system cannot inject its forged cookies into the Browser.