"unless the cookie is strictly necessary to provide a service requested by the user"
Isn't this open to some interpretation? Seems like a pretty wide loop hole. Seems that this will allow a site to set/read it's own cookies no problem. Third-party ad-networks and trackers though, yeah, they would not fall within this definition I think. And isn't that a good thing?
IMO, the 'service requested by the user' is to deliver the website, and all that the 'website' entails.
One might also say that cookies are never strictly necessary. We can always just put tracking IDs in the URL. And when browsers get rid of URL bars, it'll be harder for people to copy/paste the URL (with session ID) so the 'security' aspect against that argument will fall on deaf ears ("I can't see the problem you're talking about, so it's not real").
So? All those websites have to do is ask permission from the site visitor to track them. Rather than tracking them without their consent...
And if people don't want to be tracked, and the site loses out by not tracking them, so be it... That is a better situation than somebody being tracked without their knowledge/consent.
Comments
"unless the cookie is strictly necessary to provide a service requested by the user"
Isn't this open to some interpretation? Seems like a pretty wide loop hole. Seems that this will allow a site to set/read it's own cookies no problem. Third-party ad-networks and trackers though, yeah, they would not fall within this definition I think. And isn't that a good thing?
IMO, the 'service requested by the user' is to deliver the website, and all that the 'website' entails.
One might also say that cookies are never strictly necessary. We can always just put tracking IDs in the URL. And when browsers get rid of URL bars, it'll be harder for people to copy/paste the URL (with session ID) so the 'security' aspect against that argument will fall on deaf ears ("I can't see the problem you're talking about, so it's not real").
I don't think it's a good thing. Many websites rely on advertising to allow them to even exist
So? All those websites have to do is ask permission from the site visitor to track them. Rather than tracking them without their consent...
And if people don't want to be tracked, and the site loses out by not tracking them, so be it... That is a better situation than somebody being tracked without their knowledge/consent.