[daveoc64]

>I never understood why the HTTP Do Not Track header wasn’t used to signal cookie preferences.

You aren't really giving preferences related to cookies with these "cookie banners".

The laws in the EU require companies to get user permission for certain types of data processing.

Cookies may be involved in that, but they may not be.

Browser features like local storage or session storage would also be covered, and a lot of processing done server-side without the use of cookies requires permission too.

A single indicator like the DNT header or the newer GPC header can't cover all of this, so it isn't suitable for complying with the ePrivacy Directive or GDPR.

[hedora]

It’s broken in the same way as do-not-stab. We tried that in my town, but people started slashing each other. One person got a big knife and kept it sheathed, then clubbed people with the handle.

There’s clearly no way to indicate what sort of knife based assault is acceptable using a single indicator.