The official EU GDPR site says that consent is required for anything except "strictly necessary" cookies.
"To comply with the regulations governing cookies under the GDPR and the ePrivacy Directive you must:
Receive users’ consent before you use any cookies except strictly necessary cookies."
There are no exceptions for not "nefarious" or "fishy" - only if there is no way your site can function without every cookie.
Legitimate reasons to use cookies that are not strictly necessary include analytics, optimization, user experience, social media sharing, sign in with (third-party IDP), incorporating content or code that is hosted on other sites, and more.
I recognize and agree with the dislike for this, but if it's inaccurate, I'd love a correction.
Analytics and optimization are things the eu is trying to prevent, so of course you get a popup.
But even GitHub, who proudly declared they had removed all non-essential cookies https://github.blog/2020-12-17-no-cookie-for-you/ added them back https://github.com/github/site-policy/pull/582/files and now if you click either "Manage cookies" or "Do not share my personal information" at the bottom of the page, you'll see they have the common "Required", "Analytics", "Social Media", "Advertising" categories.
(Bummed that they have the Advertising category.)
Also, I'm seeing headlines like "Are Internet Cookies About To Crumble?" (not really, but you know how tech media is!) but I wonder how much longer cookies are even going to be relevant.
When's the last time you did this:
document.cookie = "username=John Smith; expires=Thu, 18 Dec 2013 12:00:00 UTC; path=/";
For most modern developers, the answer is never! They're not really used in modern development by us. Apparently about 40% of websites use cookies, and it's almost always for ad re-targeting - the only reason they make you auth again after clearing is really to auth you with the cookie, your auth with the site is usually just HTTP requests and doesn't require cookies.TLDR I think they're going away anyway, they're passe and it makes too much sense for Google to obsolete competitors by suddenly dropping them. GDPR calling out cookies is like the American law that bans "magic mushrooms" - they should have been more specific in identifying a specific unlawful behavior.
Upvoted for the good info btw (it just didn't do anything lol) thanks for sharing
janosdebugs, could you comment on the tech behind it?
[1]: https://dl.acm.org/doi/10.1145/3648233 [2]: https://spacy.io/
https://github.com/stassa/louise
The referenced papers include some examples on learning a simple CFG for a small set of Magic: the Gathering examples. More recent work looks at solving mazes and taking names (under review).
One of our PhDs is working to implement all this in Rust btw.
Sorry for advertising my work on your post :)