back
178 comments
FTR, Firefox is working on supporting this natively: https://bugzilla.mozilla.org/show_bug.cgi?id=1783015

According to this german article: https://www.soeren-hentzschel.at/firefox/firefox-sagt-cookie... , you can already set various values for the cookiebanners.service.mode about:config setting on Firefox nightly. 1 denies all cookies, 2 also accepts if there is no option to deny or if denying didn't work.

If any Firefox Devs read this; PLEASE ADD:

If I sign in / store a password for the website, allow cookies.

In the old days (Netscape Navigator) you'd get an annoying popup asking you if you wanted to store cookies. Firefox came from the open sourcing of Netscape. How things repeat!
cookies were once delicious delicacies - https://bugzilla.mozilla.org/show_bug.cgi?id=213186
Doesn't work on Android yet. Can't wait for this to be finished, cookie banners are even more annoying when you have as small a screen as on a phone...
Does this use some regularly updated list to recognize the various different types of banner?
This brings up a great point! Why didn't browsers jump in right away and offer this natively instead of letting the web get littered with annoying cookie banners that everyone is either going to (1) ignore (2) blindly accept?
I fully expect the EU will somehow find a way to regulate this out of existence .... (in protection of users all browser software must ensure privacy options are not supressed and displayed prominently with a dialog immune to any form of automation ....)
Firefox should worry more with core browser, standards, speed, security, bugs... And less with implementing things that already exist as addons
Excellent extension with one glaring flaw: IDCAC accepts cookies if there is no option to decline them. You don't see annoying popups anymore, but the cookies are still there tracking you. This can be combated by combining it combined with Cookie AutoDelete [0]. Cookie AutoDelete solves the problem by purging all cookies automatically (except your whitelist) when the tab is closed. They work great together

[0] https://github.com/Cookie-AutoDelete/Cookie-AutoDelete

> IDCAC accepts cookies if there is no option to decline them. You don't see annoying popups anymore, but the cookies are still there tracking you.

Yes. Because I don't care about cookies. This is not an anti-tracking extension. I do not care about being tracked. I just want to stop being bombarded with cookie consent dialogs.

I'd rather use an extension that tells companies no, that exercises the legal right to say no. Dont just accept then delete (with likely other downstream consequences such as re-logging in when you dont want), just opt out. Make it clear that privacy matters. Dont just hack (with multiple extensions), vote.

Use a moral & good & fit to task (not apathetic & consenting extension) like Consent-o-matic[1] or Auto Cookie Optout[2].

Some people actively dont care. Dont do that. Care. Help. Be a positive influence. (Ed: wow, unpopular opinion, over something that costs people nothing to assist in!! -2 points!

[1] https://github.com/cavi-au/Consent-O-Matic

[2] https://github.com/CodyMcCodington/AutoCookieOptout

> glaring flaw

It's a feature not a flaw. See, I literally don't care about cookies. Deny them, allow them, whatever. Just don't bother me. That's exactly what the extension says and does.

I respect your, and others’, opinion about not caring about tracking. But this extension is not named "i-dont-care-about-tracking", but instead misleading people into thinking it’s only about cookies when it’s not. It accepts all and any tracking, which can be far more advanced than just simple cookies.

Again, anyone can use this, I really don’t care, but the original author is essentially doing the work of adtech companies (not really surprising that they sold out their users in that context) by lying about the extension.

Temporary Containers also solve this problem (as long as you don't open things outside temporary containers), while also isolating tabs from other cookies.
Another option is to use temporary containers for everything but the sites where you'd like to stay logged in.
No, it doesn't solve the problem, because personal data processing doesn't only happen using cookies
Isn't uMatrix just as good, since it blocks non-first party cookies by default?
Related:

“I don’t care about cookies“ web extension acquired by Avast - https://news.ycombinator.com/item?id=32850799 - Sept 2022 (215 comments)

I don't care about cookies - https://news.ycombinator.com/item?id=26519457 - March 2021 (187 comments)

FYI this extension recognizes pop-ups and automatically fills them out based on your preferences. Currently open sourced

https://consentomatic.au.dk/

Ah nice, now I'm spoilt for choice again… Currently using Super Agent, now I wonder if this one may be better…
It would be awesome if Avast moved the extension source code to Github or somewhere else public. I hope existing users won't settle blindly for whatever changes get added from now on.
I don't understand this attitude. You're annoyed by company's malicious compliance with a law designed to protect you, so you act out against the law, and not the malicious compliance?

Isn't the correct response to say "I always care about unnecessary cookies, don't set them"?

I know there are much less popular extensions that do just this, but I won't link to any because I'm not sure which are best now (just did a search and realised my choice may be out of date).

We didn't ask to be protected. The malicious compliance is an obvious consequence of the badly written law.
I've been thinking: the number of websites I want to stay logged into are quite few, and most of them I don't need to keep being logged into when clicking external links. From my point of view, that is what _I_ need cookies for.

E.g., I like to be able to go to facebook.com and be logged in, but when I click an external link, I kind a like to open a tab where I am not logged in. Same for hacker news and Youtube and my email.

When I'm "outside" those websites, sure, just accept all cookies and delete them when I close the tab

I imagine this can be done with Firefox containers and a bit of smarts, but I don't know how.

It’s actually not that hard:

1. Install Firefox container management extension 2. Make some containers 3. Visit websites and add them to only open in certain containers 4. Install cookie auto delete extension. 5. Add exceptions for sites you want to be logged into for each container the first time you visit them.

I have some other extension that makes a temp container for each new click that I can’t remember the name of now and I’m not by my PC.

Cookie auto delete may be superfluous.

Con is google is still broken for me (mainly gmail) because of the web of redirects they do and there’s no way in the container extension to add a top level domain to a particular extension (that I’ve found).

I was looking for this exact setup a couple months back. I found a system that works for me, though not exactly perfect.

You can use the extension "Simple Tab Groups"[1] to automatically open some domains in specific Firefox containers like you described, by assigning a container to a group, and then configuring a domain to always open in that group.

The downside is that not all groups will be visible at a time, and you'll need to first select your previous group before finding the tab you came from. For me, that's an acceptable downside given the advantages it brings.

[1] - https://addons.mozilla.org/en-US/firefox/addon/simple-tab-gr...

The solution is an extension called Temporary Containers.

You have to turn it to "Automatic mode", and fiddle a bit with the settings, but I have it set up so that every time I open a new tab it is a fresh isolated session, and will be destroyed when the tab is closed.

When I need to be logged in, I use the regular containers in Firefox for each service, or a context like "work", instead of the temporary containers.

For facebook you have https://addons.mozilla.org/en-US/firefox/addon/facebook-cont..., it opens everything from meta in its own container and block it on other sites. External links open outside of the container
I'm using Consent-O-Matic[0]. Works pretty well.

[0]: https://github.com/cavi-au/Consent-O-Matic

I was never clear on this extension. Does it just suppress the the cookie prompts, does it only accept essential cookies or does it do the default action and accept everything?
I’m glad someone did this. I immediately uninstalled the extension when I saw that it had been acquired by Avast.
Was there any ublock origin filter that could do the same.

Cookie popups are aids, what's someone gonna do? Say no and then quit the site? It doesn't actually change behaviour from the root cause, just passes on the different to the end user.

This github page seems a bit casual/flippant, there's no explanation of what the extension does or anything to build trust/confidence in the author. Hopefully it gets more developed as it sounds like a good idea.
I'm similarly annoyed by cookie popups - why can't they just accept that I won't take their shit? Fortunately there's an addon for this:

https://addons.mozilla.org/en-US/firefox/addon/consent-o-mat...

With this you can preconfigure your choices, even accepting them. The default is to reject all.

I've been using Super Agent for this purpose since it has a Safari extension. It seems to work in more cases than not.

Its web site feels very… corporate, and I can't find a source code link anyway, so I'm sure it's making money off of me somehow, but I can't figure out how - according to the site's FAQ, it isn't selling any data, so who knows.

https://www.super-agent.com

I uninstalled after the acquisition as I wasn't keen to hear the Avast siren go off every time a cookie consent banner is detected.
Fyi to prevent cookie popups, in Ublock Origin enable these 2 filter lists under "Annoyances"

Adguard annoyances

Ublock filter - annoyances

This is a manifest V2 extension. Unless someone converts it to V3, it will stop working end of this year.
I do something similar. You can configure this using Chromium policies and don't need an extension. I wonder if Firefox policies does the same thing as well.
Is there any reason this is installed manually and not in the Firefox addons store?
I have no idea why cookie retention is a server-side thing instead of a client-side thing.

Browsers should silently accept cookies, and delete them once the tab/window has been closed, and cookies should be stored only on user request (a toggle near the url bar) or after submitting a login form.

Every time I say we miss P3P
Can I get this on mobile?
Stop using / enabling Chrome and its derivatives.

Any use of that codebase - Brave, etc. - empowers Google. They're the ones pushing it forward, and developer mindshare empowers the player holding the reins.

Firefox or broke.