I mean, if people wanted to track visitors without cookies, they’d just use etags… https://www.secjuice.com/etag-entity-tag-tracking/ https://www.secjuice.com/

I mean, if people wanted to track visitors without cookies, they’d just use etags… https://www.secjuice.com/etag-entity-tag-tracking/ https://www.secjuice.com/etag-entity-tag-tracking/ Has Apple’s ITP closed this particular loophole by ignoring etags in third party iframes and capping them to 7 days etc. ? It seems browsers will want to restrict ALL first party cookies to 7 days unless the visitor explicitly allows some domain to store their identity. Frankly speaking, identity can be done better without cookies. Look at Web3 sign-ins, we need something built into the browser and seamless. For now maybe an extension. Then browser makers can have a privacy mode that retires cookies, entirely. But how are you supposed to do caching without storing and sending identifying data equivalent to cookies? Thoughts?