3 ms·

Thanks for your feedback mtmail Just to brainstorm: Would they buy advertising results via vendors, e.g. https://developers.google.com/third-party-ads/googlea

Thanks for your feedback mtmail Just to brainstorm: Would they buy advertising results via vendors, e.g. https://developers.google.com/third-party-ads/googleads-vendors https://developers.google.com/third-party-ads/googleads-vend...? Or/And approach popular browser extensions; popular plugins with an offer to buy data, via GA or other tools? Regarding ISP's, currently with SSL, i don't see how they do it unless the ISP's are using a man-in-the-middle HTTPS proxy against websites with non-pinned SSL certificates - but that is ilegal, correct? So, i'm still puzzled

mtmail 4y ago
There's a whole industry of data brokers buying data https://www.cbsnews.com/sanfrancisco/news/verizon-att-end-location-data-sales-brokers/ https://www.cbsnews.com/sanfrancisco/news/verizon-att-end-lo... It can be deals with apps/widgets/website/software-libraries or even buy-out of an app. https://www.denverpost.com/2019/07/28/online-data-for-sale-privacy/ https://www.denverpost.com/2019/07/28/online-data-for-sale-p... You're right with ISPs. These days they'd only be able to see the domain name. That part of the HTTP header is unencrypted. Man-in-the-middle won't work, as you said, due to certificate pinning.