3 ms·

As gorhill mentioned in the comments, this isn't really a 1st-party tracking, it's "3rd-party disguised as 1st-party". Tracking URL is on a subdomain of 1st-par

As gorhill mentioned in the comments, this isn't really a 1st-party tracking, it's "3rd-party disguised as 1st-party". Tracking URL is on a subdomain of 1st-party domain, but it resolves to 3rd-party IP ang request goes to 3rd-party infrastructure.

jimktrains2 7y ago
That doesn't need to be true at all. You could imagine a service that acts as a can and proxy for the 1st party that injects ads into the HTML directly and handles certain urls on the main domain. Also, 3rd party infrastructure could be something like aws. Are you really going to block all ec2 address ranges?
- M2Ys4U 7y ago
  Forcing people who want to include adware on their sites to run and maintain a proxy is an additional overhead that many won't want to do. This reduces the attractiveness of adverts, which means they won't be as prevalent, which means tracking concerns are lessened. That's a win, no?
  - jimktrains2 7y ago
    There are already companies that do this for other thing. It's basically the model cloudflare uses, but they don't have the ad injection part. I believe brandingbrand did the same model for mobile sites. To the site owner, they're just pointing dns at the ad company and treating it like a cdn.
  - kgwxd 7y ago
    I feel like it is a win. It forces the 2 companies into a trust relationship with each other instead of using my machine as a intermediary.
  - jrockway 7y ago
    I doubt we will win anything from this. Some advertising provider will provide an easily-runnable proxy and say "we give you double CPM if you give us the logged-in user's email address". Now you have even less privacy. Third-party requests with cookies made it easy to start tracking people across sites... but there are other ways if that is made to stop working. Given how much money flows through the advertising industry, I am sure someone will pay for the week or so of engineering to make advertising more invasive.
    - NullPrefix 7y ago
      Doesn't this increase the risk of costly GDPR non compliance?
      - jrockway 7y ago
        Just georestrict your website to not allow visitors from Europe. What I learned from the whole Blizzard fiasco is that the future is selling products to China. China doesn't really care about the GDPR.
        NullPrefix 7y ago
        Good, at least for Europeans. It's good that malware peddlers self identify themselves.
        ryanisnan 7y ago
        You can hardly call Blizzard a malware peddler...
        NullPrefix 7y ago
        I was referring to the websites, which block access to Europe, because they don't comply with GDPR.
        ryanisnan 7y ago

jimktrains2 7y ago

That doesn't need to be true at all. You could imagine a service that acts as a can and proxy for the 1st party that injects ads into the HTML directly and handles certain urls on the main domain. Also, 3rd party infrastructure could be something like aws. Are you really going to block all ec2 address ranges?

M2Ys4U 7y ago
Forcing people who want to include adware on their sites to run and maintain a proxy is an additional overhead that many won't want to do. This reduces the attractiveness of adverts, which means they won't be as prevalent, which means tracking concerns are lessened. That's a win, no?
- jimktrains2 7y ago
  There are already companies that do this for other thing. It's basically the model cloudflare uses, but they don't have the ad injection part. I believe brandingbrand did the same model for mobile sites. To the site owner, they're just pointing dns at the ad company and treating it like a cdn.
- kgwxd 7y ago
  I feel like it is a win. It forces the 2 companies into a trust relationship with each other instead of using my machine as a intermediary.
- jrockway 7y ago
  I doubt we will win anything from this. Some advertising provider will provide an easily-runnable proxy and say "we give you double CPM if you give us the logged-in user's email address". Now you have even less privacy. Third-party requests with cookies made it easy to start tracking people across sites... but there are other ways if that is made to stop working. Given how much money flows through the advertising industry, I am sure someone will pay for the week or so of engineering to make advertising more invasive.
  - NullPrefix 7y ago
    Doesn't this increase the risk of costly GDPR non compliance?
    - jrockway 7y ago
      Just georestrict your website to not allow visitors from Europe. What I learned from the whole Blizzard fiasco is that the future is selling products to China. China doesn't really care about the GDPR.
      - NullPrefix 7y ago
        Good, at least for Europeans. It's good that malware peddlers self identify themselves.
      - ryanisnan 7y ago
        You can hardly call Blizzard a malware peddler...
        NullPrefix 7y ago
        I was referring to the websites, which block access to Europe, because they don't comply with GDPR.
        ryanisnan 7y ago