7 ms·

Disabling JavaScript does not stop fingerprinting either. HTTP headers are sufficient to construct unique user identifiers. Passing that data via API to a FaaS

Disabling JavaScript does not stop fingerprinting either. HTTP headers are sufficient to construct unique user identifiers. Passing that data via API to a FaaS provider would enable cross site tracking that's invisible to the visitor. Edit: The required FaaS implementation is trivial too. I could launch an endpoint that performs exactly this function in 30-60 minutes.

fnordpiglet 4y ago
In fact, the disablement of JavaScript itself is a very identifying characteristic.
- account42 4y ago
  Its one added bit versus countless bits that can no longer be probed. Yeah disabling JS alone is not enough but it is not useless either.
  - remram 4y ago
    Not all bits have an equivalent distribution. If very few people have that bit set then it is very differentiating.