Re: [dev] [surf] [patch] 13 patches from my Universal Same-Origin Policy branch

From: Markus Teich <markus.teich_AT_stusta.mhn.de>
Date: Sun, 29 Mar 2015 21:58:42 +0200

noname_AT_inventati.org wrote:
> The long-term solution is to stop sending UA and convince others (Dillo
> developers and TorBrowser first, addon developers and users second, major
> browsers last) to do the same.

Heyho,

even then you are still in the anonymity set of „Hey look, that guy want's to be
anonymous, let's focus our effort on him!“. The really long term solution would
imho be to establish web standards which forbid such identifying information
leakage by default. There should be no need for a UA and OS/language information
should only be submitted to servers on an opt-in basis. Unfortunately regular
users cannot be fixed and therefore this has to be enforced by a more powerfull
gremium imho. In the meantime the best compromise is to follow the largest group
of regular users and pretend to be one of them.

--Markus
Received on Sun Mar 29 2015 - 21:58:42 CEST