The GDPR doesn't forbid using cookies, by the way. If cookies are used to remember that you logged in using a session cookie, or remember the state of a shopping cart, or stuff like that, no warning is necessary. It's a law which requires consent to tracking, not consent to cookies.
You complain about lawmakers' poor understanding of technology, but I don't think your understanding of law is any better if you think that "every website is forced to show a pop-up". They choose to show a pop-up because they're forced to get consent if they want to track you.
Fact is most popups inform you about cookie use but don’t give you an option to do jack. And what makes you believe they’re ePrivacy compliant? I’ll bet you 90% of those sites, even when well intentioned, pollute you with tracking cookies anyways.
I meant GDPR. It's the reason why websites have to get consent if they want to track you. I believe you're right that it doesn't mention cookies though, I don't believe it cares about what technology is used for tracking.
> Edit: by the way no modern website uses cookies to maintain your shopping cart, and instead of relying on a persistent credential cookie
That's what I meant. You store some unique ID on the client in a cookie, then you have a shopping cart database on the back-end. I didn't mean to imply that the cart items are stored in the cookie, just to distinguish the persistent shopping cart use-case from the logging in to a user account use-case.
> you could just use a password manager to expedite login and be more secure overall.
I do this. I still want to be logged in for a while.
> Finally, “private” mode on most browsers contains cookies to short lived session cookies within the tab lifespan.
I know. Would you find it very convenient if your browser always acted as if you were in private mode and didn't keep you logged in for longer than the lifespan of the tab? No? Neither would I.
Actually, I do use privacy mode at all times. The only hindrance is the need to recredential. I have a password manager that auto fills those forms in. It works great, and is better security overall. My cookies database shouldn’t be equivalent to a password file, and I don’t carry around a pile of spammy cookies handing them out to every invasive spy company, hoping an obnoxious pop up mandated by an ineffective regulation will shield me. I use computer science, which always works, rather than political science, which is just a degree for folks who like to drink too much.
I’m trying to figure out in what way this has made anything better, safer, or whatever? By the way, cookies is like the 1996 way of tracking and those opt outs don’t opt you out of tracking.
So, yeah. Super giant win for regulations there - clicking away useless disclaimers en masse to satisfy some EU bureaucrats poor understanding of technology. I’m sure they got a great post out of it. It’s like the pop up ad that you are required to pop up on every website but no one benefits, not even the website owner. At least a real ad the website owner makes some money.