Live data from Hacker News

GitHub is adding web cookies for enterprise users

github.com

81–86 of 86 posts

Re: GitHub is adding web cookies for enterprise users

#81
post #27

Earlier quoted context omitted.

As I understand it, the GDPR did not make web browsing a worse experience. Rather, folks tasked with compliance at a few companies came up with a horrible solution that probably doesn't actually comply, and everyone started copying it. GDPR requires consent; it doesn't require you to come up with the most obnoxious way to obtain it.

Can you think of another way to implement it that wouldn't be just as obnoxious though? I feel like anything that could be perceived as unobtrusive could just as likely be seen as trying to hide or minimize the presence of the banner which might be construed as a violation of the law. I feel like EU regulators should have worked with web standards committees to add a technical means and requirement to classify cookie…

> Can you think of another way to implement it that wouldn't be just as obnoxious though?

A link to a page where visitors can opt-in would work just fine and not be obnoxious. The banners are obnoxious not because it's impossible, but because the very idea of consent goes against the business' goals. Or their just lazy: You don't need PII to track marketing performance, and if you aren't unnecessarily collecting PII, you don't need to ask.

> I feel like EU regulators should have worked with web standards committees to add a technical means and requirement to classify cookies.

Hardly anyone would use it, because most companies aren't seriously interested in getting consent. They are interested in data, and consent is merely a hoop to jump through.

Re: GitHub is adding web cookies for enterprise users

#82

developers are typically unreachable to marketers. This will be MSFT unlocking a rare audience that will fetch top dollars from enterprise advertisers, right before cookies go out of standard. This move, like the exclusive Netflix ads inventory, makes it clear that MSFT sees ads as a big driver to business growth.

I'm sure they'll ask for user's explicit consent before planting any cookies, as required by current legislation, right? I can't imagine many developers opting in.

that restriction only applies to EU users

Re: GitHub is adding web cookies for enterprise users

#83

I don't understand why people care about cookies. The stupid cookie banners are an actual nuisance.

You really don't understand why people don't want to have their internet history logged or be tracked as they browse the internet? Cookies that track you are bad. The banners are bad too.

Re: GitHub is adding web cookies for enterprise users

#84
post #31

Earlier quoted context omitted.

As much as I loathe the cookie warnings, I'm constantly amazed at situations that don't avoid them. For example: there is no reason that PayPal needs to serve 3rd party cookies in a payment flow. I've actually started to reject nonessential cookies most of the time now. Doubt it matters at all.

Payment gateway integrations might be one of the few legitimate non-advertising use cases I can think of for 3rd party cookies. What makes you say they don't need them?

What 3rd party cookie is needed to process a payment? It's obnoxious I have to take care of the cookie situation what seems like every time I start a PayPal payment flow.

Re: GitHub is adding web cookies for enterprise users

#85
post #39

Earlier quoted context omitted.

Do you mean that if you reject the cookie then the transaction will fail?

I worked for a payment gateway years ago, when safari rolled out their initial blocking of third party cookies back in 2013 it broke some of our transaction flows yes. There are a bunch of different kinds of payment gateway integrations, with various tradeoffs. However a common pattern, at least at the time, was to use an iframe with the payment form in it. Our form was multi page, and used cookie based sessions to t…

Wouldn't those be "necessary cookies"?

Re: GitHub is adding web cookies for enterprise users

#86
post #3

Another PR that will be closed to comments pretty soon because of the mobs.

Doesn't matter, because, "These updates will go into effect after the 30-day notice and comment period".

i.e. "Comment all you like, we're steaming ahead with this stupid idea regardless."

Post reply on HN