4 ms·
They claim the opt-out is stored on their servers and associated with the uid (implying that the optout=1 cookie isn't necessary)
by gergles 12y ago
They claim the opt-out is stored on their servers and associated with the uid (implying that the optout=1 cookie isn't necessary)
- fortmeaded 12y agoNot just missing a cookie. The original post has screenshots of status checkers showing no opt out.
- cpeterso 12y agoIt's convenient for them that their server-side opt-out code cannot be audited. It would have been easier for them to just set an anonymous, client-side opt-out cookie.
- dspillett 12y agoA client-side cookie is not sufficient, you'd have to set it in every browser you ever use. Practically speaking it needs to be server-side, but should be (but never would be) opt-in rather than opt-out. The other option is respecting DNT, but that is never going to happen as a default behaviour for all companies.