3 ms·
Last-Modified doesn't even have to be a valid date string: http://www.nikcub.com/posts/persistant-and-unblockable-cookies-using-http-headers http://www.nikcub.
by nikcub 13y ago
Last-Modified doesn't even have to be a valid date string:
http://www.nikcub.com/posts/persistant-and-unblockable-cookies-using-http-headers http://www.nikcub.com/posts/persistant-and-unblockable-cooki...
As an update to that post from 2011, I never did get the browsers to update their parsers.
This E-Tag bug has been known for over a decade. As part of my post I tried to find the earliest written record of it and found a post in 2003:
http://www.arctic.org/~dean/tracking-without-cookies.html http://www.arctic.org/~dean/tracking-without-cookies.html
It seems to get 'rediscovered' at least a couple of times a year.
- ghostdiver 13y agoYou should use valid Last-Modified value with some randomness and join it with browser fingerprint: https://panopticlick.eff.org https://panopticlick.eff.org
- gsnedders 13y ago<https://bugzilla.mozilla.org/show_bug.cgi?id=114508> https://bugzilla.mozilla.org/show_bug.cgi?id=114508> is Gecko bug for this; can't find one for Chromium, and CORE-40723 for the privileged few with Zombie-Presto bug-tracker access.