4 ms·
A comment in the WP post brings up the malicious nature of FLOC opt-out - it requires base layer changes to your site. Google knows from Samesite that it requir
by hirsin 6y ago
A comment in the WP post brings up the malicious nature of FLOC opt-out - it requires base layer changes to your site. Google knows from Samesite that it requires "your app is going to break" levels of urgency to get old sites to update, and can likely follow the dots to how an opt-out is much less likely to be used than an opt in.
This feels like something that should get more attention/discussion. It flew for Samesite because "better security defaults" is a good argument. Not sure it works that way for FLOC.
Despite being involved in the Samesite rollout I hadn't quite made the same connection as that commenter, as I am not as connected to the FLOC work.
- mark_and_sweep 6y agoFLoC cohort computation only triggers on websites which call the document.interestCohort API or load ads. So your average website does not have to opt-out. It's not opted-in in the first place.
- josefx 6y agoHow likely is it that any third party script would call the API? Most sites I know try to pull in at least one Google hosted script.
- mark_and_sweep 6y agoYou may have to audit third-party scripts before using them (which is not a bad idea regardless of FLoC). If you load Google Analytics on your site, I feel like you have no right to complain that it may track users...