2 ms·
> The basic functionality of Google Analytics does not have a way to identify you server-side You absolutely can identify someone server-side with heuristics.
by Nextgrid 5y ago
> The basic functionality of Google Analytics does not have a way to identify you server-side
You absolutely can identify someone server-side with heuristics. Your browser sends its IP address, user-agent and possibly referer header at a minimum when fetching the Google Analytics JS, and I'm not even talking about fingerprinting your TCP or TLS stack.
- judge2020 5y agouser-agents are becoming increasingly frozen[0], and IP addresses are getting even more temporary with IPv6 (they already are for mobile networks). It's indeed possible to tie a browser to a user account server-side without cookies, but it's by no means reliable and providing a guarantee based on circumstances you can't control is a terrible idea. 0: https://chromestatus.com/feature/5704553745874944 https://chromestatus.com/feature/5704553745874944
- deleted 5y ago[deleted]
- jspazz 5y ago> IP addresses are getting even more temporary with IPv6 That's true but kinda irrelevant. IPv6 is at best as bad for privacy as static IPv4 since you're assigned a fixed range, so the adversary can both identify you by the static part of your address, and possibly resolve devices behind the router which would be hidden by NAT in IPv4.