Thread · 3 tweets · 19 Aug 2020

Replying to @JulesPolonetsky and @ashk4n, @nytimes

I don’t know, in general the way in which the DNT requirement is expressed in the regs doesn’t work very well. DNT is attached to every HTTP request. You don’t want to treat every HTTP request as a *request* to opt out, that’s pretty much nonsense.
What you want is to treat DNT interactions as if the user had *already* made a previous request to opt out previously, and you’re in a state of honouring it. Otherwise this means dozens of requests for every page load.
In general the regs assume a much clunkier experience than is ideal for users. Eg. we initially had the DNS button built so that you hit it and you’re immediately opted out. Processing time: maybe ~15ms. But the regs forced us to also show a notice, which is painful and useless.