3 ms·
Personally, I don't set the DNT header. You have no way of knowing if any sites are actually going to comply, and it actually provides an extra datapoint to fi
by Retr0spectrum 10y ago
Personally, I don't set the DNT header.
You have no way of knowing if any sites are actually going to comply, and it actually provides an extra datapoint to fingerprint you with.
- sp332 10y agoBut isn't it better to at least ask instead of not asking at all?
- Retr0spectrum 10y agoAs I said, simply asking for it will actually reduce your privacy for any service that doesn't comply, by making you more fingerprintable.
- sp332 10y agoBut there is some pressure on companies to comply. Plus they can't use the defense that you could have enabled it and chose not to.
- posterboy 10y agoIts pretty obvious the default should be the opposite to avoid a race condition like that.
- Retr0spectrum 10y agoAre you suggesting a "please track me" header? Nobody would ever use it...
- admax88q 10y agoIt was proposed that DNT be the default, but then ad companies said if that were the case, then they would just ignore the header. They want users to explicitly opt out of tracking otherwise they will assume they agree to being tracked.
- diegorbaquero 10y agoThere are 100s of ways to fingerprint the browser and more exactly. I think is better to set it for the few that comply.
- Retr0spectrum 10y agoThat's true, but they usually require running javascript etc. Looking at the request headers is the simplest way of fingerprinting.