Hacker News Reader

Comment by zerostar07 | Hacker News Reader

i think they re talking about this: https://en.wikipedia.org/wiki/General_Data_Protection_Regula...

They aren't, exactly. In one of the articles linked from this one, it says

> It’s easy to confuse the ePrivacy regulation with the General Data Protection Regulation, a broader law addressing consumer data privacy that has dominated the market’s attention lately. The core difference is that cookie use is central to the ePrivacy regulation, which is why it’s known as the “cookie law.” Businesses in Europe must get explicit consent to use cookies and provide clear opt-outs to users under the proposed new law. Meanwhile, the GDPR regulates the general handling of personal data.

and personal data includes cookies :)

So yeah, confusing all around.

They are probably talking about this:

https://en.wikipedia.org/wiki/EPrivacy_Regulation_(European_...

If that is true, why not throw things into some P2P cryptographically secure user account system like this[1] (disclaimer: ours).

From a technology perspective, it is non-trivial for corps/companies to do this (since they don't value that). But the technology to do it already exists, so if laws are forcing people this direction, what is the best way to market the availability of systems like this?

Any thoughts/clues? Thanks!

[1] https://hackernoon.com/so-you-want-to-build-a-p2p-twitter-wi...

some distributed pseudo-identity could be, as long as it has strong privacy protection and identities can be deleted / obfuscated in a way that becomes untraceable. but here you still have a centralized identity provider.

That's a good idea, but if I were a German citizen I'd rather they use something that's tried and true like shibboleth. I can't speak for the rest of the world, but shibboleth is what most of America's colleges and universities use to allow students to access research material the institution has paid for. Something that isn't obvious though, is anyone can setup a shibboleth identity provider, the only difference being that it's not on the whitelists that academic identity providers are on.

The general term for this property is “federated identity” and academia is probably the most mature and widespread implementation - academic institutions regularly allow visitors from other institutions to use their home institution’s credentials, for example in the worldwide “eduroam” WiFi network.

Reply on news.ycombinator.com