This interface should be all handled by the browser. It was a mistake not to do this. It makes no sense that blocking cookies should be done via inconststent and dubious interfaces implemented by the websites themselves. Much better that the law would specify minimum standards for browser interfaces to make those choices (which btw would be trivially implemented, vs forcing the sites to spend time and money to implement a shitty js pop-up). Plus you are assured that cookies are really blocked.
As for server-side fingerprinting, the browser, upon the user's choice, would send the allow/deny information to the website, which is forced by law to honor it (as it is today).
As for server-side fingerprinting, the browser, upon the user's choice, would send the allow/deny information to the website, which is forced by law to honor it (as it is today).