This is a great step in the right direction -- though it is not enough. Different identities would still be going through the same IP (not much one can do about

This is a great step in the right direction -- though it is not enough. Different identities would still be going through the same IP (not much one can do about that). But some things that can be solved are NOT addressed with containers: - everything panopticlick uses (fonts list, plugin lists, timezone, agent, etc.) - everything panopticlick doesn't use, but the bad guys do (aa font signatures, ...) - plugin abuse - e.g., Flash 'cookies', Silverlight 'isolated storage', Java JNLP properties - see EverCookie[0] for more things that have been known to occur in the wild (and remember it is outdated). the article mentions cache is not shared, but e.g. HSTS pinning is. evercookie easily pierces through this system. Since 2005 or so, I have had different users for different purposes; Not sure how well it works on Windows these days (it used to not work at all back in 2005) - but on Linux, it's just a "sux - otheruser" or "sudo -u otheruser" command away, and it is well isolated on the web side[1] [0] https://samy.pl/evercookie/ https://samy.pl/evercookie/ [1] Full X11 isolation requires a lot more effort - but luckily it seems that recent browsers don't let websites abuse that