¡Privacy groups lose battle over "cookie" controls!

[chacmool]

FYI...article @ link below.
http://www.zdnet.com/zdnn/stories/ne...kpt=hud0004200

[StuartW]

This is an interesting development following a draft memo in April by the IETF http://www.ietf.org. in which they concluded that the HTTP State Management Mechanism
(cookies to you and me), were not desirable.IETF do think alternatives exist, which are preferable because of the lack of security afforded . A similar capability can be achieved using a 'bare' HTTP protocol without state management extensions.
The IETF reccommend cookies only if the user is aware that session state is being maintained and consents to it, and that the user can delete it at any time.
It also makes the very important point that cookies are not usually encrypted, and can be readily intercepted. The problem of course,is that cookies are useful, such as in single click shopping.However it is this use, including the 'single click' and 'double click' could lead to fraud.
Whether voluntary codes of practice are implemented, or legislation is brought in, this can only apply to the USA.The internet being what it is, it will be very difficult to control cookie mis-use from other countries.