WordPress.org

Make WordPress Core

Opened 14 months ago

Last modified 12 months ago

#44806 new enhancement

If commenter doesn't check (cookie) consent checkbox, don't use Gravatar.

Reported by: lakenh Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version:
Component: Privacy Keywords:
Focuses: privacy Cc:
PR Number:

Description

I think it would be a safe assumption that if a user doesn't want cookies, they most likely don't want their image or a hash of their email to be publicly facing.

If this is done, I propose we change the string for the checkbox, to specify this in particular.

Related to #44067, #14682

Change History (6)

#1 @idea15
14 months ago

Congratulations on your first ticket @lakenh!

We have a focus on Gravatar in our V2 roadmap and will definitely take a look at this.

This ticket was mentioned in Slack in #core-privacy by lakenh. View the logs.


13 months ago

This ticket was mentioned in Slack in #core-privacy by lakenh. View the logs.


12 months ago

#4 follow-up: @pputzer
12 months ago

I don't think conflating consent for two separate issues (cookies and Gravatar.com integration) is a good idea. I might want to have those cookies in my browser, but not share my email with the world (i.e. gravatars). It might also run afoul of the "coupling prohibition" in GDPR.

#5 in reply to: ↑ 4 ; follow-up: @lakenh
12 months ago

Replying to pputzer:

I don't think conflating consent for two separate issues (cookies and Gravatar.com integration) is a good idea. I might want to have those cookies in my browser, but not share my email with the world (i.e. gravatars). It might also run afoul of the "coupling prohibition" in GDPR.

Fair point in regards to the conflation issue.

Though, there has been talk of removing the need for cookies entirely in commenting for logged out users. I don't recall what tickets or slack discussions that was in, though.

#6 in reply to: ↑ 5 @SergeyBiryukov
12 months ago

Replying to lakenh:

Though, there has been talk of removing the need for cookies entirely in commenting for logged out users. I don't recall what tickets or slack discussions that was in, though.

See #43857.

Note: See TracTickets for help on using tickets.