this post was submitted on 07 Sep 2023
1082 points (91.1% liked)
Programmer Humor
19623 readers
84 users here now
Welcome to Programmer Humor!
This is a place where you can post jokes, memes, humor, etc. related to programming!
For sharing awful code theres also Programming Horror.
Rules
- Keep content in english
- No advertisements
- Posts must be related to programming or programmer topics
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Serious question: I know that there are tracking cookies and the user should be able to decline those,but most sites have an auth cookie that stores you're credentials. The devs can store it in a different place like local storage but thats really unsecured.what can the devs do in this situation when the user decline all cookies?
The EU is not stupid. They categorized cookies into the necessary ones for site-usage and those that aren't. So developers just categorize their session cookie (rightfully) as necessary and that's it.
well, they can be disabled by the user and the site simply won't work.
He means they are exempt from the EU law that says the use must be presented with the option to disable it
The eu rules are mostly about unnecessary cookies. Most web devs just copied whatever everyone else was doing and now there's this standard of having to accept cookies but the EU doesn't really enforce it like that
it's not up to the EU to enforce it.
not sure why you're downvoted. of course member states enforce it.
Usually the prompts are specifically for tracking cookies, not essential ones for login. Alternatives without cookies:
The GDPR is not "cookie law", it only prohibits tracking users in a way not essential to the operation of the site using locally stored identifiers (cookies, local storage, indexed DB...)
Storing a cookie to track login sessions, or color scheme preference does not require asking the user or allowing them to decline.
What the dev can do if user decline processing of personal data is not store such personal data in cookies or anywhere.
Or even better, do not track the user so the consent would only be needed in for example registration form.