4 ms·
Merely making an HTTP request to a site -- any HTTP request, as far as I'm aware -- is sufficient for that site to set a cookie on your machine. If on the othe
by jlebar 14y ago
Merely making an HTTP request to a site -- any HTTP request, as far as I'm aware -- is sufficient for that site to set a cookie on your machine.
If on the other hand the site wants to store something in localstorage, the site has to run JS on your machine. That's a much higher bar.
- ferongr 14y agoIt's a bit disingenuous to make such a claim. The bar is essentially the same since browsers execute all, 1st and 3rd-party JS by default. Loading a document is enough. For a web-browser it's quite rare to make requests without completing the transfer. The bar is essentially the same and the changes that privacy-invading 3rd party scripts have to do to bypass the Firefox's implementation are minimal, so Mozilla may as well not make any triumphant claims until this glaring issue is fixed.
- jvm 14y ago> The bar is essentially the same since browsers execute all, 1st and 3rd-party JS by default. Not mine :-) (But point taken)