> if the intent were to remove the UA it would be worse That is hopefully the end goal. It's not worse, it's an ideal that goes hand in hand with reducing cook

> if the intent were to remove the UA it would be worse That is hopefully the end goal. It's not worse, it's an ideal that goes hand in hand with reducing cookie usage, removing flash, mandating SSL, etc. The UA was an attempt to see if the ecosystem could cooperate to make apps more actively intelligent. This is a failed experiment. Security teaches us to reduce attack surface and we should not be using half-measures like a header-string to trigger naive/implicit client behavior. Behaviors should be explicit for safety.