web site requires cookies, but does not say so

[treinen]

When accessing the web site without cookies enabled I get a Security Error, which does not indicate to the user what the problem is. Instead. when cookies are not enabled, the web site should issue a message that cookies are required. Anyway, aren't you required by law to inform your users about usage of cookies ?

[hferee]

Weird: I didn't find any cookie on the main demo website. On my own instance I only get a PHP session ID cookie. This is a first-party "strictly necessary" and as such, not covered by the GDPR. However, it is still an issue if the website is not working when those are disabled.