Re:Show HN: Open-source Auth0 alternative Ory Kratos v0.13 r...
by samtho on Wednesday April 19, 2023 @11:44AM
(#35629615)
Their cookie banner is provided by a 3rd party and I can’t see how it is non-compliant unless there is something I’m missing.
[ Parent
| on HN ]
Re:Show HN: Open-source Auth0 alternative Ory Kratos v0.13 r...
by capableweb on Wednesday April 19, 2023 @11:57AM
(#35629783)
Because it's a 3rd party, it cannot be non-compliant?
Seems like it's 1 extra click to disallow compared to allow, so yeah, non-compliant. Should be exactly as easy to say yes as saying no. In this case it's not.
Re:Show HN: Open-source Auth0 alternative Ory Kratos v0.13 r...
by pestaa on Wednesday April 19, 2023 @12:26PM
(#35630136)
Overblown criticism like this give GDPR an undeserved bad rep.
Re:Show HN: Open-source Auth0 alternative Ory Kratos v0.13 r...
by illiarian on Wednesday April 19, 2023 @12:32PM
(#35630203)
It's not overblown criticism. They advertise their product as GDPR-compliant, and yet their website uses dark patterns to trick people into allowing tracking, and is not GDPR-compliant.
Do I trust them to be as diligent in their product?
And yeah, what gives GDPR bad rep is exactly these kinds of dark patterns and other forms of malicious compliance by non-caring companies.
Re:Show HN: Open-source Auth0 alternative Ory Kratos v0.13 r...
by smolder on Wednesday April 19, 2023 @01:27PM
(#35630860)
Incorrect implementations give GDPR a bad reputation, though there are worse ones.
Re:Show HN: Open-source Auth0 alternative Ory Kratos v0.13 r...
by capableweb on Wednesday April 19, 2023 @01:30PM
(#35630901)
Either we have regulation and call people out when they don't follow it and hopefully eventually fine them, or we can just skip it all together.
Re:Show HN: Open-source Auth0 alternative Ory Kratos v0.13 r...
by samtho on Wednesday April 19, 2023 @03:53PM
(#35632534)
> Because it's a 3rd party, it cannot be non-compliant?
Not at all. My point was that they are not offering that as product.
Re:Show HN: Open-source Auth0 alternative Ory Kratos v0.13 r...
by illiarian on Wednesday April 19, 2023 @12:28PM
(#35630150)
It's their choice to chose that banner, and their choice to configure it this way. Most third-party banners are non-compliant, including this one. Which they should know, given that they advertise GDPR compliance for their main product.
The banner should have a Reject All option, preferably as default action.
Also relevant: https://noyb.eu/en/where-did-all-reject-buttons-come