3 ms·

I'm not sure I understand it. Sure, if a website knows the floc of a user on multiple weeks they can presumably use a third party service for identification. B

I'm not sure I understand it. Sure, if a website knows the floc of a user on multiple weeks they can presumably use a third party service for identification. But how does the website initially join the different floc ids, unless they have already identified the user?

adriancr 6y ago
(floc,ip) is for all intents and purposes unique. So just track that and you have your user. If floc changes - just look what floc is dead on that ip and match to that user. If IP changes in same subnet (ipv6 privacy extension) just match new ip to old floc. Add in browser fingerprint for overkill. A sufficiently large network can identify a user if he's logged in anywhere and you have everything you need