Re: privacy at layer 7 and above

Simon Hobson <linux@thehobsons.co.uk> Fri, 15 February 2019 12:45 UTC

Return-Path: <linux@thehobsons.co.uk>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA07D128AFB for <ipv6@ietfa.amsl.com>; Fri, 15 Feb 2019 04:45:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GyW3e6DPgcFh for <ipv6@ietfa.amsl.com>; Fri, 15 Feb 2019 04:45:57 -0800 (PST)
Received: from patsy.thehobsons.co.uk (patsy.thehobsons.co.uk [80.229.10.150]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB328130F82 for <ipv6@ietf.org>; Fri, 15 Feb 2019 04:45:56 -0800 (PST)
X-Quarantine-ID: <CXqqZSrfBedQ>
X-Virus-Scanned: Debian amavisd-new at patsy.thehobsons.co.uk
X-Amavis-Alert: BAD HEADER SECTION, Header line longer than 998 characters: References: <60[...]
Received: from simons-macbookpro.thehobsons.co.uk (Simons-MacBookPro.thehobsons.co.uk [192.168.137.111]) by patsy.thehobsons.co.uk (Postfix) with ESMTPSA id 6BFBD1BC37 for <ipv6@ietf.org>; Fri, 15 Feb 2019 12:41:31 +0000 (UTC)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
Subject: Re: privacy at layer 7 and above
From: Simon Hobson <linux@thehobsons.co.uk>
In-Reply-To: <2a235b2b-157d-2007-a82b-f120db097d72@go6.si>
Date: Fri, 15 Feb 2019 12:41:30 +0000
Content-Transfer-Encoding: quoted-printable
Message-Id: <5CBF8130-C313-4EF0-B4F5-87F2932727E8@thehobsons.co.uk>
References: <60fabe4b-fd76-4b35-08d3-09adce43dd71@si6networks.com> <c16e0e1f-1ed2-ad88-80f1-070bdd8bccca@go6.si> <1F2C2AEE-1C7D-481C-BBA7-7E507312C53A@employees.org> <e56a6e5b-648d-200e-c35d-97f15a31fb2a@asgard.org> <CAO42Z2zh7fKAgQJq9aLCTiFoSSsTeGM=pK3gXitg+gcxH=9fhQ@mail.gmail.com> <d38857c2-6e92-91d6-bb5d-d3eeeb61276a@gmail.com> <CAO42Z2yb47OyXk__Sz-kO00pfcBJgLAhff5DF=mpAddR0iCnAA@mail.gmail.com> <2612280f-195a-ae7a-b3b1-9022d9282fa7@foobar.org> <56F813F4-C512-40A9-8A68-1090C76A80F6@consulintel.es> <CAHL_VyCN8kU7qnLOphfGR25-xGBe_p6WeGTkKVXwU5uy5aJ8Dg@mail.gmail.com> <65DB4854-97D2-4C31-A691-2CD93812EF93@consulintel.es> <CAHL_VyCMpCcGkEQu+RV1GRf2QLB-HD0+AOOBV0YhfQ5sbydVzQ@mail.gmail.com> <8CE7A0CD-97D9-46A0-814D-CAF8788F9964@consulintel.es> <e3e0bf2273e04f15b792665d0f66dfe5@boeing.com> <4c5fab33-2bff-e5b5-fc1d-8f60a01a146d@go6.si> <b4525832-9151-20bf-7136-31d87ba6c88d@huitema.net> <463f15cf-2754-e2e8-609d-dc0f33448c6c@go6.si> <5519271a-fce7-ed75-d7b1-a360e34bb47a@gmail.com> <2a235b 2b-157d-2007-a82b-f120db097d72@go6.si>
To: IPv6 List <ipv6@ietf.org>
X-Mailer: Apple Mail (2.2104)
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/GYylfU1IsFj51Re3REmjnH9mBq4>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 15 Feb 2019 12:46:00 -0000

Alexandre Petrescu <alexandre.petrescu@gmail.com> wrote:

> GDPR itself has some issues when it comes to implementation: websites now invite the user to accept or not cookies, but the manner in which this is performed - a technical implementation - leads to accept more, or less.  Some times end users feel confident their privacy is respected, other times they feel they loose control of it, and worse - outright cheated.
> 
> In time, an example of this GDPR-enforced dialogue is the following related to cookie acceptance:
> ...

Yes, cookie control has become a complete farce - and you missed out possibly the most annoying option, where clicking on the option to "manage cookies" just gives you a list of the (possibly) hundreds of trackers they use and links to the sites to control them. Many of them require you to create an online account (and thus accept their T&Cs and give them permission to track you !) before you can tick a box to "pretty please, think about not tracking me, though I don't trust you to honour this request".
I have a feeling things will settle down. At present some of the "big fish" are in the spotlight - like certain companies who's entire business case depends on not complying with GDPR. I have a feeling that sooner or later there will be some test cases over cookie control and misleading UIs.



Jan Zorz - Go6 <jan@go6.si> wrote:

> "To put "lipstick on a pig" is a rhetorical expression, used to convey the message that making superficial or cosmetic changes is a futile attempt to disguise the true nature of a product or person. "
> 
> https://en.wikipedia.org/wiki/Lipstick_on_a_pig

Interestingly, "polish a turd" on Wikipedia redirects to the same page - the phrase having much the same meaning.