4 ms·

Yes. And cookie splash screens! I admire GDPR's intention but hasn't it been a massive human time sink. Not to take away from your point, just that it's all a

Yes. And cookie splash screens! I admire GDPR's intention but hasn't it been a massive human time sink. Not to take away from your point, just that it's all a hindrance.

grishka 3y ago
Those can at least be blocked with ad blockers and/or disabling JS.
rvnx 3y ago
@adammartinetti : maybe you could consider developing a new product where you display a GDPR consent banner once, and then these settings apply to all Cloudflare-proxied websites (by passing this consent information as an additional header to the proxied site)
- meltedcapacitor 3y ago
  Sounds inferior to the "no cookies no banner" solution. The GDPR does not mandate gratuitous and pointless personalised spying, which is the only case that requires consent. Normal operations (say a shop collecting payment details and shipping address to fulfil an order) do not require a consent banner.
_v7gu 3y ago
That's more on the websites that track your personal data for non-essential purposes. No tracking means no banners are necessary.
- ricardo81 3y ago
  Finer points, my point is just about people wishing to view web pages.
- shadowgovt 3y ago
  I don't know that most web admins can tell if they should float a banner, so vague is the law. Technically, I think if you have the default Apache logging configured and you read those logs, you should probably float that banner.
  - denton-scratch 3y ago
    I believe you're mistaken. GDPR allows you to record IP addresses for normal operation of a site, which specifically includes logging. No banner is required. GDPR is not "vague" about this; perhaps you haven't read it (as laws go, it's pretty easy to read).
    - shadowgovt 3y ago
      It's easy to read because it's vague, and it's going to allow some regulator to decide whether my use of IP addresses constitutes "normal operation." Puts a hell of a lot of trust in government officials to decide who is worthy of prosecution. It reminds me of the war on drugs in a lot of ways.

Yes. And cookie splash screens! I admire GDPR's intention but hasn't it been a massive human time sink. Not to take away from your point, just that it's all a hindrance.

grishka 3y ago

Those can at least be blocked with ad blockers and/or disabling JS.

rvnx 3y ago

@adammartinetti : maybe you could consider developing a new product where you display a GDPR consent banner once, and then these settings apply to all Cloudflare-proxied websites (by passing this consent information as an additional header to the proxied site)

meltedcapacitor 3y ago
Sounds inferior to the "no cookies no banner" solution. The GDPR does not mandate gratuitous and pointless personalised spying, which is the only case that requires consent. Normal operations (say a shop collecting payment details and shipping address to fulfil an order) do not require a consent banner.

_v7gu 3y ago

That's more on the websites that track your personal data for non-essential purposes. No tracking means no banners are necessary.

ricardo81 3y ago
Finer points, my point is just about people wishing to view web pages.
shadowgovt 3y ago
I don't know that most web admins can tell if they should float a banner, so vague is the law. Technically, I think if you have the default Apache logging configured and you read those logs, you should probably float that banner.
- denton-scratch 3y ago
  I believe you're mistaken. GDPR allows you to record IP addresses for normal operation of a site, which specifically includes logging. No banner is required. GDPR is not "vague" about this; perhaps you haven't read it (as laws go, it's pretty easy to read).
  - shadowgovt 3y ago
    It's easy to read because it's vague, and it's going to allow some regulator to decide whether my use of IP addresses constitutes "normal operation." Puts a hell of a lot of trust in government officials to decide who is worthy of prosecution. It reminds me of the war on drugs in a lot of ways.