3 ms·
For that matter, browser + ip fingerprinting can be server-tracked anyway, if less reliably overall. Especially with JS enabled. There are lots of tricks that c
by tracker1 4y ago
For that matter, browser + ip fingerprinting can be server-tracked anyway, if less reliably overall. Especially with JS enabled. There are lots of tricks that can be used for this.
Aside, wonder how good/bad ip+agent fingerprinting could be combined with a url that feeds a small randomly generated string with a VERY long cache expiration, with server/proxy no-cache headers (e-tag per agent/ip). Effectively similar to a cookie, without technically being a cookie.
- medbrane 4y agoBut serverside tracking without consent would still be illegal, right? GDPR does not make a difference between cookies and other mechanisms.
- tracker1 4y agoFair enough... didn't know, since I'm in the US and don't deal with EU on a business level.
- thaumasiotes 4y agoSetting cookies involves you telling all your visitors that you're tracking them. How would the server-side tracking be detected?
- jefftk 4y agoI expect Microsoft would still disclose it in their privacy policy. Or be vulnerable to a whistleblower.
- janosdebugs 4y agoFingerprinting still requires a lot of client-side information. Sending that to the server for no good reason may prompt some questions.
- jefftk 4y agoNot clear in this case, since while detecting ad fraud doesn't meet the "strictly necessary" requirements of ePrivacy (necessary for storing the cookie on your machine) it is still an open question whether the GDPR requires user consent for it. (Lawyers at advertising companies think that you don't, but that doesn't mean they're right)
- wkat4242 4y agoIt is but it's a hell of a lot harder to prove.