Handling consent metadata

Hi Folks,

today, I heard a request that the metadata documenting informed consent
should be kept for later inspection by the browser.

Our current potential solution is: If a user-granted exception is
registered, the browser should store the TSR for later reference.

I would like to discuss alternative ways to transmit this context:
- In a response header?
- Within the site that calls the API (how)?
- As a JSON "exception-metadata" object that is passed to the Javascript
API?
- Within the TSR?

Any opinions/preferences?

If nobody has a preference, we will keep the TSR as our preferred
"consent-metadata" store.


Regards,
matthias

Received on Monday, 27 March 2017 17:10:15 UTC