4 ms·
The question is a bit of a non sequitur, since this is not tracking. The TLS fingerprint is not a useful tracking vector, by itself nor as part of some composit
by jsnell 2y ago
The question is a bit of a non sequitur, since this is not tracking. The TLS fingerprint is not a useful tracking vector, by itself nor as part of some composite fingerprint.
- fijiaarone 2y agoThe point is that you have to use an approved client (eg browser, os) with an approved cert authority that goes through approved gatekeepers (eg Cloudflare, Akamai)
- jsnell 2y agoThat seems pretty unlikely to be the original point of https://news.ycombinator.com/item?id=42549415 https://news.ycombinator.com/item?id=42549415, which mentions none of that, and doesn't even have directionally the same concerns. But also, what you wrote is basically nonsense. Clients don't need "an approved cert authority". Nor are there any "approved gatekeepers", all major browsers are equally happy connecting to your Raspberry Pi as they are connecting to Cloudflare.