4 ms·

> If this product is capable of collecting that sort of data in the first place It's based solely on the http referer, which your browser sends.

by xPaw 6y ago

Reelin 6y ago
The post specifies that the referrer is used for computing their "visit" metric (for which IP would also obviously be needed). It doesn't specify how their service is determining the site you came from. Since they don't say, my assumption is that they're correlating data obtained in some other way because that seems to be par for the course at this point. Note that referrers are self reported, so there's an incentive for such a service to avoid relying on them. Each web site can set its own desired referrer policy, and users can further configure when, if, and how their browser sends referrers. (For example, Firefox has referer.XOriginPolicy and referer.spoofSource among other preferences.)
- xPaw 6y ago
  Referer includes the site you came from, what am I missing? > Each web site can set its own desired referrer policy Yes, and it won't be able to tell which site you come from if it's set to no-referer.
  - Reelin 6y ago
    > Referer includes the site you came from, what am I missing? I never claimed otherwise? There are two separate metrics in question here. One is the "visit" metric which the post specifies is based on the referrer. The other is quantifying which other sites sent traffic your way. The post conspicuously fails to define how that second metric is computed. For that second metric, I noted that there is an obvious incentive to avoid using the referrer and that the current status quo is to rely on other methods. (In particular, fingerprinting combined with centralized analytics services that have vision into a vast amount of traffic. Note that Cloudflare easily qualifies here given the sheer number of assets and websites they host.) If the entirety of this analytics service is based solely on referrers coupled with IP addresses then the author should unambiguously state that up front. Otherwise I'm going to assume the worst for the reasons given above.

> If this product is capable of collecting that sort of data in the first place It's based solely on the http referer, which your browser sends.

by xPaw 6y ago

> If this product is capable of collecting that sort of data in the first place It's based solely on the http referer, which your browser sends.

Reelin 6y ago

The post specifies that the referrer is used for computing their "visit" metric (for which IP would also obviously be needed). It doesn't specify how their service is determining the site you came from. Since they don't say, my assumption is that they're correlating data obtained in some other way because that seems to be par for the course at this point. Note that referrers are self reported, so there's an incentive for such a service to avoid relying on them. Each web site can set its own desired referrer policy, and users can further configure when, if, and how their browser sends referrers. (For example, Firefox has referer.XOriginPolicy and referer.spoofSource among other preferences.)

xPaw 6y ago
Referer includes the site you came from, what am I missing? > Each web site can set its own desired referrer policy Yes, and it won't be able to tell which site you come from if it's set to no-referer.
- Reelin 6y ago
  > Referer includes the site you came from, what am I missing? I never claimed otherwise? There are two separate metrics in question here. One is the "visit" metric which the post specifies is based on the referrer. The other is quantifying which other sites sent traffic your way. The post conspicuously fails to define how that second metric is computed. For that second metric, I noted that there is an obvious incentive to avoid using the referrer and that the current status quo is to rely on other methods. (In particular, fingerprinting combined with centralized analytics services that have vision into a vast amount of traffic. Note that Cloudflare easily qualifies here given the sheer number of assets and websites they host.) If the entirety of this analytics service is based solely on referrers coupled with IP addresses then the author should unambiguously state that up front. Otherwise I'm going to assume the worst for the reasons given above.