Re: Some half-baked thoughts about cookies.

Hiya,

On 17/08/18 16:44, Poul-Henning Kamp wrote:
> --------
> In message <7999a7ef-cc5e-7d75-df9f-24acbb4a47f7@cs.tcd.ie>, Stephen Farrell wr
> ites:
> 
>> Not sure I agree there, if UAs by default sent a different
>> 64 bit randomly generated ID to each origin and kept those
>> IDs for a long time, that seems worse to me than the current
>> situation. (I'm not saying that's Mike's proposal, but
>> just disagreeing with your "no big difference" statement.)
> 
> How is that worse than sending an opaque cookie,

If it was always sent, with no opt-out. (Again, I'm not
saying that was Mike's proposal though.)

> possibly
> containing imcompetently protected GDPR-covered personal
> information for a long time ?
> 
> At least with a randomly generated ID, you know it cannot
> leak information on the local machine (hacked/lost/discarded).

True.

Cheers,
S.