title: PHP 7.3 SameSite=None for cross-site cookies in HTTPS
body: <p>I'm embedding <a href="https://website2.com" rel="nofollow noreferrer">https://website2.com</a> into <a href="https://website1.com" rel="nofollow noreferrer">https://website1.com</a> via an iframe.</p>
  
  <p>It was working well until recently when Chrome changed its security policy requiring cookie SameSite set to None.
  My https app has 2 cookies PHPSESSID and HASH_PHPSESSID.
  I'm using PHP 7.3 and Jelix.</p>
  
  <p>To set SameSite to None I now have:
  <code>session_set_cookie_params(['samesite' =&gt; 'None', 'secure' =&gt; true]);
  session_start();</code>.</p>
  
  <p>As a result, PHPSESSID is correctly defined (Secure=True | SameSite = None).
  However, I can't get HASH_PHPSESSID to be set (Secure=True | SameSite = )! </p>
  
  <p>Any idea how to handle this in https?</p>