1. Diigolet uses cookies authroization if available (available means that 3rd party cookies are allowed) 2. If cookies are not available, diigolet gracefully falls back to http authorization. 3. The advantage of cookies auth over http auth is that your sign in status can be remembered so you don't have to type your username and password the next time you open the browser.