2 ms·
Whitelisting or blacklisting UA strings is meaningless. Any actually malicious person is going to spoof that without even giving it much thought. It's only the
by ChrisSD 7y ago
Whitelisting or blacklisting UA strings is meaningless. Any actually malicious person is going to spoof that without even giving it much thought. It's only the honest people who are affected.
Funnily enough Google itself used to advocate against detecting UA strings (I don't know if they still do). Mind you, groups within Google don't always listen to each other.
- lucb1e 7y agoIndeed, I'll happily (and honestly) report my user agent as PHP to you and add my email address to it so you can reach out if there are any problems, but if I notice you're blocking my proxy that removes your crap and turns a multi-megabyte news page (which I'm paying for) into something that loads instantly even on GPRS/EDGE, I'm just going to spoof it.