Hacker News new | ask | show | jobs
by runawaybottle 1919 days ago
Wish cookie consent could be saved at the browser level and websites can just check against my settings instead of asking me every time.

I guess that makes too much sense.

4 comments

Cookies are not the problem here. They don't need consent for cookies, but for tracking. And if you were to block cookies, they can still track you with a lot of other fingerprinting technologies - and would again ask you for consent for that.

I recommend enabling the EasyList Cookie blocking list in the adblocker of choice (i.e. uBlock Origin). Its not enabled by default, so check your settings (Edit: This will block the consent popups, not the cookies).

If there was a browser setting to accept (or reject) all cookies regardless of intended use, that would actually solve the problem for many. Just because many people want to make case by case decisions, we shouldn't have to burden everyone with this task.

I personally would prefer to accept all cookies, and take responsibility for keeping separate cookie jars as needed.

As I said, there are hundreds of other ways to fingerprint you. If the number of users who block tracking cookies reaches a critical mass, advertisers would switch to those.
What you're talking about doesn't describe my problem. My only problem is that sites spend any time at all asking about cookies or tracking, which I can control on my end anyway.
You can't. You can control cookies. You can't control tracking.
Yeah, I'd like a Please-Track-Me option that auto-accepts everything.
There should be a Please-Track-Me option that anyone who wants to be tracked can send.

The lack of the header should indicate that the user denied consent to be tracked.

Here you go: https://www.i-dont-care-about-cookies.eu/

I'd rather something that auto-rejected, so I don't use it, but it exists.

> In most cases, it just blocks or hides cookie related pop-ups.

This bit is actually the opposite. All tracking _must_ be opt-in, therefore by blocking the pop-up and not opting-in the website cannot track you.

It's only for the websites which are broken when not opting-in that it accepts the policy (which AIUI is itself a violation of the GDPR).

I would globally pre-consent to all tracking if I could because I don'd mind supporting the websites I use. This should definitely be a browser feature.
In theory it can:

How should a Transparency & Consent String be stored?

In version 1 of the TCF Specifications the consent string was specified to be stored as either a 1st party cookie for service-specific consent or a 3rd party cookie for global consent. In version 2 of the TCF Specifications, the storage mechanism used for service-specific TC Strings is up to a CMP, including any non-cookie storage mechanism. However, global TC Strings must still be stored as cookies under the consensu.org domain.[0]

Pretty much no website uses it.

[0] https://github.com/InteractiveAdvertisingBureau/GDPR-Transpa...

In practice, some CMPs used to share positive consent across websites, but did not share negative consent. So if they tricked you into accepting once, they keep it; if you refuse, they keep annoying you. My understanding is that watchdogs pushed back, which is why the whole sharing thing isn't as prominent anymore.
There is uBlock origin. It enforces my lack of consent with remarkable efficiency.
I think there is a browser extension for this. I forgot what it's called but it partners with the cookie banner companies, so that it automatically sets your preferences on most websites.