4 ms·

DNT does not provide informed consent. It may, if set to not track, imply denial, but the reverse is not true. If DNT is accepting or unset, the site needs to f

DNT does not provide informed consent. It may, if set to not track, imply denial, but the reverse is not true. If DNT is accepting or unset, the site needs to fall back to the banner to get consent. And at that point you may as well prompt everyone with the banner instead of complicating the codebase with extra logic for a DNT edge case.

ben_w 2y ago
Mm. For existing privacy options — location, microphone, camera — Safari on iOS has the options of "ask"/"deny"/"allow". I wouldn't be surprised by legislation for a Do Not Track option in DMA designed Gatekeepers' browsers, defaulting to "ask", where all three options must be handled accordingly by websites. "Ask" would also have to be the default behaviour when no preference is transmitted.
- randomdata 2y ago
  Again, as the law in question requires informed consent, "allow" and "ask" end up being the same thing. A new DNT law as you propose would contradict the other law of which we speak.
  - Ntrails 2y ago
    Informed generalised denial could be accepted and no cookie banner shown surely? In much the same way no banner is required if no cookie is being set.
account42 2y ago
I doubt there would be any concerns with "complicating the codebase" (really?) if there was a Yes-Track header that gave consent but no negative signal.
- randomdata 2y ago
  There is a "Yes-Track" header – DNT: 0 Granted, you can't legally use it like that where EU laws apply, per the GDPR. Hence the complaints about the GDPR you see in other comments.
  - smolder 2y ago
    It's not really a Yes Track if it's simply absent. The user hasn't requested to be tracked. I'm not even sure with it set to 0 that you can assume that intent. I guess it would depend on the browsers behavior, but as you say the law is not compatible with that use.
    - randomdata 2y ago
      According to the specification, DNT: 0 = Yes, track me. DNT: 1 = No, do not track me. > I'm not even sure with it set to 0 that you can assume that intent. That's the problem. Someone not paying attention might inadvertently set DNT: 0, which is why the law is written the way it is. But at the same time we have techies who knowingly and carefully set such values and want the service to acknowledge it, contrary to the law. Hence the contention.
deleted 2y ago
[deleted]

ben_w 2y ago

Mm. For existing privacy options — location, microphone, camera — Safari on iOS has the options of "ask"/"deny"/"allow". I wouldn't be surprised by legislation for a Do Not Track option in DMA designed Gatekeepers' browsers, defaulting to "ask", where all three options must be handled accordingly by websites. "Ask" would also have to be the default behaviour when no preference is transmitted.

randomdata 2y ago
Again, as the law in question requires informed consent, "allow" and "ask" end up being the same thing. A new DNT law as you propose would contradict the other law of which we speak.
- Ntrails 2y ago
  Informed generalised denial could be accepted and no cookie banner shown surely? In much the same way no banner is required if no cookie is being set.

account42 2y ago

I doubt there would be any concerns with "complicating the codebase" (really?) if there was a Yes-Track header that gave consent but no negative signal.

randomdata 2y ago
There is a "Yes-Track" header – DNT: 0 Granted, you can't legally use it like that where EU laws apply, per the GDPR. Hence the complaints about the GDPR you see in other comments.
- smolder 2y ago
  It's not really a Yes Track if it's simply absent. The user hasn't requested to be tracked. I'm not even sure with it set to 0 that you can assume that intent. I guess it would depend on the browsers behavior, but as you say the law is not compatible with that use.
  - randomdata 2y ago
    According to the specification, DNT: 0 = Yes, track me. DNT: 1 = No, do not track me. > I'm not even sure with it set to 0 that you can assume that intent. That's the problem. Someone not paying attention might inadvertently set DNT: 0, which is why the law is written the way it is. But at the same time we have techies who knowingly and carefully set such values and want the service to acknowledge it, contrary to the law. Hence the contention.

deleted 2y ago

[deleted]