4 ms·

It's insane how P3P from 2002 was more advanced than anything the EU can come up with now.

• Hamuko 8y ago
  You mean the standard that never caught on and now lives on as a piece of Internet history? Yeah, super advanced shit, let's have that again.
• icebraining 8y ago
  The EU didn't come up with any protocols, advanced or not. The GDPR is not even specific to the internet, let alone specific ways of getting consent. It's up to the industry if they want to use fancy protocols to do so.
  • lozenge 8y ago
    Nobody has confidence that an explicit "I don't care about cookies" setting would satisfy GDPR.
• xg15 8y ago
  My guess is, even if there were some elegant, widely-supported standard for machine-readable privacy policies and even if browsers had some dedicated built-in API for privacy consents with some really polished and frictionless UI, you'd probably still be bombarded with popups begging you to click the "consent" buttons on that UI. The problem is that it's not a technical problem, but a political. No matter how technically elegant your spec, it doesn't change anything about the underlying conflict of interest: Website operators want to collect personal data and show ads, while users want to keep personal data to themselves and don't want to see ads. So trying to solve this via any kind of web standard is asking the website operators to act against their own interests. If you have no enforcement or incentive, you will end up with a standard that is either toothless (P3P, DNT with opt-in) or simply ignored (DNT with opt-out). GDPR (and the cookie law before) do have enforcement, which is why web sites can't ignore them - instead they fight back with a barrage of popups.