3 ms·

Yes, in fact it is already solved! It's very easy: Just don't use any cookies. You can still serve text, images, videos, anything. It just works, you don't nee

Yes, in fact it is already solved! It's very easy: Just don't use any cookies. You can still serve text, images, videos, anything. It just works, you don't need a cookie notice, your pages are faster, and you even save money on hosting static content.

car_analogy 5y ago
Correct me if I'm wrong, but functionally required cookies (such as for persistent login) are exempt from having to show a consent notice?
- HelloNurse 5y ago
  It's a slippery slope: many "entrepreneurs" consider showing ads and tracing user activity an essential function.
- BjoernKW 5y ago
  There are exemptions for strictly necessary cookies, in which case explicit user consent isn't required. However, you still have to inform users about these cookies. The question is, though, what constitutes strictly necessary cookies in which use case. It also isn't clearly stated anywhere - or otherwise agreed upon, in which way you have to inform your users about these cookies. Hence, many website providers opt for the legally-safest, but terrible in terms of UX, alternative of displaying a cookie banner.
BjoernKW 5y ago
Cookies serve a purpose. They can't just be used for serving ads that follow you. Case in point: the very website we're using right now. While it's true that Hacker News would be possible without cookies, for commenting and voting you'd then have to log in each time your browser session has been closed, which would make for a less than optimal user experience.
- uniqueuid 5y ago
  My comment was obviously humorous. But I'd honestly argue that your view of cookies is very conservative. Why is the user experience less than optimal? Why can't the browser remember your credentials and automatically sign you on? (It could, of course - e.g. using client-side certificates!). We should also ask ourselves whether the user experience on some website (which lasts seconds, and is mostly irrelevant) is more important than the privacy of its users, which will be impacted forever (through first-party data collection, third-party data collection and sharing / resale of data).

car_analogy 5y ago

Correct me if I'm wrong, but functionally required cookies (such as for persistent login) are exempt from having to show a consent notice?

HelloNurse 5y ago
It's a slippery slope: many "entrepreneurs" consider showing ads and tracing user activity an essential function.
BjoernKW 5y ago
There are exemptions for strictly necessary cookies, in which case explicit user consent isn't required. However, you still have to inform users about these cookies. The question is, though, what constitutes strictly necessary cookies in which use case. It also isn't clearly stated anywhere - or otherwise agreed upon, in which way you have to inform your users about these cookies. Hence, many website providers opt for the legally-safest, but terrible in terms of UX, alternative of displaying a cookie banner.

BjoernKW 5y ago

Cookies serve a purpose. They can't just be used for serving ads that follow you. Case in point: the very website we're using right now. While it's true that Hacker News would be possible without cookies, for commenting and voting you'd then have to log in each time your browser session has been closed, which would make for a less than optimal user experience.

uniqueuid 5y ago
My comment was obviously humorous. But I'd honestly argue that your view of cookies is very conservative. Why is the user experience less than optimal? Why can't the browser remember your credentials and automatically sign you on? (It could, of course - e.g. using client-side certificates!). We should also ask ourselves whether the user experience on some website (which lasts seconds, and is mostly irrelevant) is more important than the privacy of its users, which will be impacted forever (through first-party data collection, third-party data collection and sharing / resale of data).