I have locked down Chrome to be very strict on the cookies and data it stores both temporarily and long term. I have ticked the following boxes in cookie settings:
and I currently have an exception list which looks like this [that's the complete list]:
However, if I look at the currently saved cookies:
Notice there is youtube.com, microsoft.com, msn.com. I know that subdomains are permitted, but I would have expected cross domains to be blocked but yet somehow these are still being set. If I go to
www.youtube.com and click the cookie icon in the omnnibox I can see that I definitely haven't allowed youtube.com cookies:
Am I missing something?