4 ms·
It is quite possible to responsibly implement Facebook "like" buttons on your own pages without violating your users' privacy. I wish more people would do it. I
by dwheeler 7y ago
It is quite possible to responsibly implement Facebook "like" buttons on your own pages without violating your users' privacy. I wish more people would do it. I suspect that including Facebook like Pages the way Facebook wants you to do it could be considered a gdpr violation, if it were interpreted that way perhaps people would actually fix it.
On the CII best practices badge site, we implement responsible links. As explained in our security assurance case,
"We do have links to social media sites (e.g., from the home page), but we do this in a privacy-respecting manner. It would be easy to use techniques like embedding images from external (third party) social media sites, but we intentionally do not do that, because that would expose to an external unrelated site what our users are doing without their knowledge. We instead use the approach described in "Responsible Social Share Links" by Jonathan Suh (March 26, 2015), specifically using share URLs. In this approach, if a user does not press the link, the social media site never receives any information. Instead, a social media site only receives information when the user takes a direct action to request it (e.g., a click), and that site only receives information from the specific user who requested it."
Source:
https://github.com/coreinfrastructure/best-practices-badge/blob/master/doc/security.md https://github.com/coreinfrastructure/best-practices-badge/b...
Suh's page:
https://jonsuh.com/blog/social-share-links/#use-share-urls https://jonsuh.com/blog/social-share-links/#use-share-urls
I don't mind people sharing information on Facebook, as long as they choose to do so. If they chose to do it, that's fantastic. What bothers me is Facebook being able to track people without their consent.
- 8ytecoder 7y agoIt's been a while but I remember going out of the way to strip all the JS surrounding both Like and Share buttons for Facebook. It was trivial to implement at the time. I did it because I didn't like being tracked and didn't want to inflict that on the users either. However, I had to fight for it. PM wanted the share count & page like count to show up. That can't be done without FB JS code. There's also the advertising trackers that track every aspect of your website's users. These are usually added as is and for a variety of reasons - measure conversion, tag a user as converted to not show them ads anymore, retargeting...etc. Good luck convincing your marketing team to not add any of these trackers.
- dwheeler 7y agoI did not have that problem, but I'm sure others do. I think the long-term solution is to make it clear that that is a gdpr violation, there is no reason that an unrelated third-party should get that information. Once people start getting serious fines, the bad behavior is more likely to stop.