4 ms·
This whole thing is ridiculous. While adding these widgets to blocking filters seems like a workable short-term solution, the entire cookie notice scheme is unw
by Udo 11y ago
This whole thing is ridiculous. While adding these widgets to blocking filters seems like a workable short-term solution, the entire cookie notice scheme is unworkable in the long run. The problem is, this crap will stack up in the future, and none of it will ever get abolished. On some sites, I get a triple-stacked legalese warning banner, and I have to manually close all three of them.
Since internet law will only get worse, maybe it's time for a "real" technical solution to this. For example, if we had a standardized HTML element attribute to mark these widgets, browser/adblock makers could enable people to opt out of displaying them. It might look something like this:
<div legal-notice="cookies">...</div>
<div legal-notice="DMCA">...</div>
<div legal-notice="terms-of-service">...</div>
And ideally, there would be a JavaScript API to query this as well, maybe piggy-backed on the Permissions API:
navigator.permissions.query({ name : 'skip-notice', topic : 'cookies' })
- Kequc 11y agoThese laws are still evolving and changing. Different for every country. We don't have something international we can build standards upon at this point in time. It seems to me there would also be an active push against any such implementation because it would make current solutions for getting around this type of cruft more effective than it already is. Although if we were going to go this route I'd like to see it be a server-side rather than included in the markup. The browser could detect that you are visiting a new domain and request relevant information upon connection.
- mstade 11y ago> These laws are still evolving and changing. Different for every country. We don't have something international we can build standards upon at this point in time. Not every country. This is EU legislation after all; any website hosted in one of the 28 member countries has to abide.
- kawsper 11y agoThe cookie directive is implemented differently in each country, so if you are doing business in multiple countries[0], you are in for a bloody mess. [0] http://cookiepedia.co.uk/cookie-laws-across-europe http://cookiepedia.co.uk/cookie-laws-across-europe
- blub 11y agoWhy block them? It's good that websites have to be more transparent with how they are tracking users. It is however inconvenient for the websites. They could always stop using privacy-invading ad networks and external services which track users and then they wouldn't have to show any message.
- benihana 11y ago>They could always stop using privacy-invading ad networks and external services which track users and then they wouldn't have to show any message. "if these companies would just invent and build a new infrastructure to pay the bills, they wouldn't need to present a nag."
- blub 11y agoEU citizens are under no obligation to support business models that have a negative effect (be it small or large) on their lives, nor are they obliged to make it technically convenient for companies to conduct their business. There are many business models which do not come with moral dilemmas and that do not fall under the incidence of this law. Data mining and tracking might be trendy, but it's not a free for all, there need to be rules and the privacy of users must be respected. If some companies are unable to do fulfill these basic and fair requirements, that is strictly their problem.
- efdee 11y agoYou seem to be ignoring the fact that this is about users not wanting to see that silly notice, not about websites not wanting to display it.
- andybak 11y ago> Why block them? Because I have better things to do with my time than click to close the message on every single website I visit. If you actually read them then good luck to you. I think most people either a) don't care or b) install a global blocker to suit their particular privacy requirements.
- 11y ago
- mstade 11y agoFrankly, the requirement of notice could (and should) be pushed on to user agents – not sites. For one, it would help standardize both the user experience of notices – and leave the UX of website specific notices alone – but also it would improve the current state of things where many (most?) sites in the EU simply don't care or know about the legislation. The last thing we need is more cruft sent across the wire.
- gozo 11y agoThat only works if cookies are infrequent enough, like location data, which they aren't. Also there's no way for the browser to know how the cookie is used. I'm all for a technical solution, but I'm not sure it's possible to do "cruft free" without rethinking some things. And as far as there isn't any "cookie law" on the books, it's about compliance with data protection and privacy regulation. So the EU isn't standing in the way of the industry to do that in another way.
- dom96 11y agoCouldn't agree more with this. The fact that the cookie law is forced on websites is absolutely idiotic. The browsers know what cookies are being set.
- coob 11y agoIs it actually enforced? Has anyone been taken to court over it?
- redredred 11y agoNot in court but this is a resolution from the spanish data protection agency: http://www.agpd.es/portalwebAGPD/resoluciones/procedimientos_sancionadores/ps_2014/common/pdfs/PS-00321-2013_Resolucion-de-fecha-14-01-2014_Art-ii-culo-5.1-LOPD-22.2-LSSI_Recurrida.pdf http://www.agpd.es/portalwebAGPD/resoluciones/procedimientos... (in Spanish) From the year 2013, this was the first sanction in Spain (3500€ to a jewelry). You can search for more sanctions here: http://www.agpd.es/portalwebAGPD/resoluciones/procedimientos_sancionadores/ps_2014/index-ides-idphp.php http://www.agpd.es/portalwebAGPD/resoluciones/procedimientos... Search for "Articulo 22.2 LSSI" or similar
- gozo 11y agoThe "real" technical solution here is to standardize a modern authentication system separate from cookies and have things like "do not track" actually work. The industry has, seemingly deliberately, failed to do that. So the EU has rightfully argued from "first principle" that privacy and data protection is more important than the status quo in the industry.
- baby 11y ago> to standardize a modern authentication system separate from cookies why? Then ads will use that "new" thing as well. Cookies are enough for authentication.
- gozo 11y agoThe point would be that you would have to authenticate before being tracked. Today disabling cookies will break login function of a lot of sites. I'm unfortunately short on time, but you should be able to find a discussion about this around HTTP/2.
- deleted 11y ago[deleted]
- nly 11y agoI've had third-party cookies disabled for years. It's a simple (partial) solution and really should have been the default over 10 years ago.
- facepalm 11y agoWell browsers could send an "allow cookies" header, like the "don't track" header?
- cpeterso 11y agoThe Do Not Track HTTP header would work: DNT: 1 (Do Not Track; don't show cookie notice) DNT: 0 (Allow tracking; don't show cookie notice) No DNT header (Ask before tracking)
- mtgx 11y agoThis reminds me there was a push for a 451 error that would represent censorship. Whatever happened to that? https://boingboing.net/2012/06/13/error-code-451-an-http-error.html https://boingboing.net/2012/06/13/error-code-451-an-http-err...
- kuschku 11y agoIt is being used the way it is supposed to: http://i.imgur.com/x2oG6hq.png http://i.imgur.com/x2oG6hq.png