News for hackers. Stuff that matters.

A comment on No cookie consent walls, scrolling isn’t consent, says EU data protection body. Parent comment

Re:No cookie consent walls, scrolling isn’t consent, says EU... by zozbot234 on Wednesday May 06, 2020 @09:17AM (#23090572)
P3P https://en.wikipedia.org/wiki/P3P is a thing already, if perhaps a bit overengineered. It even works in IE6!
[ Parent | on HN ]
Re:No cookie consent walls, scrolling isn’t consent, says EU... by luckylion on Wednesday May 06, 2020 @09:37AM (#23090767)
That's server-side (and dead). Cookie consent would primarily be client-side.

Otoh, we already have cookie-consent in browsers. Just don't accept cookies if you don't consent!

[ Parent | on HN ]
Re:No cookie consent walls, scrolling isn’t consent, says EU... by zozbot234 on Wednesday May 06, 2020 @09:52AM (#23090914)
P3P also exposes a machine-readable semantics for privacy policies, which could be used by the browser to manage access to not just cookies but other problematic features as well. It's a lot more flexible than "just reject cookies" or the "DNT" header.
[ Parent | on HN ]
Re:No cookie consent walls, scrolling isn’t consent, says EU... by luckylion on Wednesday May 06, 2020 @12:47PM (#23093254)
The issue is imho that the decision needs to happen server-side (so that a user with an incompatible client isn't slurped up by default), ergo the user-agent must declare the intentions of the user and the server needs to act on it.

P3P could be a hint for the the user-agent, but the user-agent would have to tell the server what level of tracking etc is acceptable to the user.

[ Parent | on HN ]