4 ms·

It’s not possible to do a lot of normal web stuff without session cookies.

by woah 8y ago

kerng 8y ago
The concepts of a session cookie is different then a cookie used for advertisemnet that tracks you across the internet. The problem is tracking and ads, not authentication and authorization for functional purposes. Cookies are just one way to track people and serve ads, there are many others. Facebook is a great example on keeping diluting these concepts. They ask for your information for function security purposes and then go back and use that same data for ads - that is unethical and has to stop.
darkarmani 8y ago
Define "a lot of normal web stuff". How did we ever do normal web stuff before session cookies?
- bigbadgoose 8y ago
  I think they would start another fire, and get another blanket
- cortesoft 8y ago
  I mean, we have had session cookies since the first version of netscape. Almost everything we think of as 'normal web stuff' is post cookies.
- wolco 8y ago
  We telnetted into places.
- paxys 8y ago
  We didn't
- deleted 8y ago
  [deleted]
- taneq 8y ago
  Session cookie in the URL?
deleted 8y ago
[deleted]
darpa_escapee 8y ago
Which is irrelevant, because session cookies don't need a warning. There is no reason to equivocate session cookies with tracking cookies.
wsy 8y ago
Cookies are allowed, tracking users without consent is now illegal in EU (regardless which technology is used).
paulmd 8y ago
The GDPR doesn't regard cookies that serve a bona-fide business purpose. You are free to use cookies to provide a shopping cart, or allow users to log in to an account at your store, or whatever. It's specifically tracking and advertising that is forbidden. If the user is not getting something out of it (besides the generic "access to my website") then presumptively don't do it. GDPR is literally as easy as that. GDPR understands full well that you need session cookies to provide a shopping cart or user account. That's why there's specific exemptions for it.

It’s not possible to do a lot of normal web stuff without session cookies.

by woah 8y ago

It’s not possible to do a lot of normal web stuff without session cookies.

The concepts of a session cookie is different then a cookie used for advertisemnet that tracks you across the internet. The problem is tracking and ads, not authentication and authorization for functional purposes. Cookies are just one way to track people and serve ads, there are many others. Facebook is a great example on keeping diluting these concepts. They ask for your information for function security purposes and then go back and use that same data for ads - that is unethical and has to stop.

darkarmani 8y ago

Define "a lot of normal web stuff". How did we ever do normal web stuff before session cookies?

bigbadgoose 8y ago
I think they would start another fire, and get another blanket
cortesoft 8y ago
I mean, we have had session cookies since the first version of netscape. Almost everything we think of as 'normal web stuff' is post cookies.
wolco 8y ago
We telnetted into places.
paxys 8y ago
We didn't
deleted 8y ago
[deleted]
taneq 8y ago
Session cookie in the URL?

deleted 8y ago

[deleted]

darpa_escapee 8y ago

Which is irrelevant, because session cookies don't need a warning. There is no reason to equivocate session cookies with tracking cookies.

wsy 8y ago

Cookies are allowed, tracking users without consent is now illegal in EU (regardless which technology is used).

paulmd 8y ago

The GDPR doesn't regard cookies that serve a bona-fide business purpose. You are free to use cookies to provide a shopping cart, or allow users to log in to an account at your store, or whatever. It's specifically tracking and advertising that is forbidden. If the user is not getting something out of it (besides the generic "access to my website") then presumptively don't do it. GDPR is literally as easy as that. GDPR understands full well that you need session cookies to provide a shopping cart or user account. That's why there's specific exemptions for it.