> I would be outraged if I didn't know what cookies were, but since I do, I think it's entirely reasonable, any half modern browser provides a mechanism to allo

> I would be outraged if I didn't know what cookies were, but since I do, I think it's entirely reasonable, any half modern browser provides a mechanism to allow or disallow, and otherwise manage cookies… Unfortunately that mechanism doesn't exist. > I'd much prefer that we abandon these idiotic "we value your privacy" nag-screens and bars There's an easy way of fixing this, and that's to just not send the cookies. See basecamp.com or amazon.co.uk (from the UK). No cookie popups, and (respectively) 0 and 3 (seemingly essential) cookies. > let it be up to the browser and user settings. That ship has sailed. You now require user consent before you set all but essential cookies https://gdpr.eu/cookies/ https://gdpr.eu/cookies/ > Even the smallest change to the Set-Cookie header could have made it trivial to implement a browser-side UI for this: Set-Cookie: <cookie-name>=<cookie-value>; Max-Age=<non-zero-digit>; Description=<LANGUAGE:User readable description,...>; Importance=<Required|Recommended|Noncritical> That ship has, as I said above, sailed. > If people don't want cookies, they can disable them in their browser. Ditto. But, seriously, do you know how ridiculous that argument sounds? Don't like people speeding? Don't drive! You are unlikely to be so thick to think that turning cookies off on a web browser will make the web anything other than completely unusable. > This is still one of the most idiotic laws the EU has made so far. The butthurt from people about this is amazing. We've had companies playing fast and loose with our data for 20+ years and they had all this time to sort themselves out, and they didn't. They kept on abusing the system to attempt to squeeze out ever more marginal gains from users personal data. This is on them.