News for hackers. Stuff that matters.

A comment on Using GDPR to obtain one’s data as JSON. Parent comment

Re:Using GDPR to obtain one’s data as JSON by chromanoid on Monday May 10, 2021 @07:37AM (#27104817)
Sure? https://www.iubenda.com/en/help/23672-gdpr-cookie-consent-ch...

I would claim the only way to make a webapp with login securely function in a usable manner is to use a session cookie with secure transport policy. Do you really need more than that?

[ Parent | on HN ]
Re:Using GDPR to obtain one’s data as JSON by simpss on Monday May 10, 2021 @11:19AM (#27106920)
not sure if you want to say that such a session cookie would require consent or not, but just to make it clear, it definitely doesn't.

See 3.2 in data protection working party recommendations: https://ec.europa.eu/justice/article-29/documentation/opinio...

[ Parent | on HN ]