4 ms·
> Instead of setting it to an arbitrary string it would be great if the UA header was not set at all. Didn't someone post his experience getting more expensive
by cocoa19 7y ago
> Instead of setting it to an arbitrary string it would be great if the UA header was not set at all.
Didn't someone post his experience getting more expensive flights because he used a Mac?
Yes! Please, take UA out.
- kalmi10 7y agoThe sites still get your UA. This was about your DNS server getting your UA.
- robgibbons 7y agoDestination websites/servers can still require that you have a UA. DoH moving away from requiring a UA wouldn't change that.
- jrockway 7y agoAre we sure this wasn't a session cookie that just happened to pick experiment A or experiment B? The user agent isn't very important. What we should start being worried about is that ISPs are now offering API access that maps your IP address to your phone number and demographic information. (Verizon does this right now, but you can opt out in your account settings.) Maybe all those VPN providers have a point. Delete the user agent, share an IP with thousands of people, and maybe you can browse in peace.
- DownGoat 7y agoThen you get stuck in ReCaptcha hell because you are not "human".
- mrspuratic 7y agoThen there's this: https://isc.sans.edu/forums/diary/Is+it+Possible+to+Identify+DNS+over+HTTPs+Without+Decrypting+TLS/25616/ https://isc.sans.edu/forums/diary/Is+it+Possible+to+Identify... detection based on payload size alone. Any implementations with a random padding ballast header?