4 ms·
I am wondering when/if Safari and Chrome are going to address CNAME cloaking. Marketing and tracking companies are just having all their clients setup CNAME rec
by mac-reality 7y ago
I am wondering when/if Safari and Chrome are going to address CNAME cloaking. Marketing and tracking companies are just having all their clients setup CNAME records to alias their domains back to the tracking domain and setting it to be a first party cookie to get around the new blocking techniques browsers are using.
- parhamn 7y agoI can't imagine you could do much. I know some ad blockers are optimistically resolving these CNAMES to see if they resolve to a tracker then block them. It'd be hard for a browser to generically identify who the first party is because it could anyone you want it to be.
- bad_user 7y agoI would argue that's OK. The problem with third-party cookies is that information gets shared across websites and thus your behavior can be tracked across websites. If you set a CNAME to point to a third-party, the cookies become in fact first-party and cross-domain tracking no longer works.
- uallo 7y agoNo it is not OK. Cross-domain tracking still works. While every domain has its own cookie, it is extremely simple to use fingerprinting to connect those cookies to a single user.