Javascript can expose capabilities, but it doesn’t help if you want to do server side processing, before sending any response to the client. At this point I th

Javascript can expose capabilities, but it doesn’t help if you want to do server side processing, before sending any response to the client. At this point I think UA spoofing is effectively a compact capabilty declaration, where you say “I can do everything X does + Y and Z specifically”