3 ms·

> IE10 defaults to Do Not Track enabled. So sending the header is not explicitly representative of the user's wishes. > Convenient, isn't it? That might be an

> IE10 defaults to Do Not Track enabled. So sending the header is not explicitly representative of the user's wishes. > Convenient, isn't it? That might be an excuse, but it's not the reason. They easily could read the DNT header and the user agent, and trust DNT headers from non-IE10 browsers.

quesera 12y ago
Absolutely. They're interpreting the situation with strict literality because it is in their benefit to do so. They have a perfectly valid reason for what they do: it's strongly beneficial to their business model to operate in a scummy but probably-legal way. They are hardly unique in this. Since we have little market recourse (Verizon is often the only option, and we are not customers of Turn), and we have no legal recourse (again, scummy but almost certainly legal in almost all circumstances)...what is left? Well, there are technical solutions to the problem. TLS is a good start. Browsers can be smarter about third party cookies. The Verizon Overcookie can be stripped by a proxy. VPN can solve many problems... This glommed on tracking junk is fragile. I strongly resent being drawn into the arms race, but it is winnable. It will take something dramatic (and who knows how long) for our outrage to be shared by a critical mass of customers/voters, so for now, I think technology is the solution. But I donate to EFF too.
cpeterso 12y ago
This is why Apache added code to ignore IE10's DNT header: http://www.cnet.com/news/apache-web-software-overrides-ie10-do-not-track-setting/ http://www.cnet.com/news/apache-web-software-overrides-ie10-... https://github.com/apache/httpd/commit/a381ff35fa4d50a5f7b9f64300dfd98859dee8d0 https://github.com/apache/httpd/commit/a381ff35fa4d50a5f7b9f... but, ironically, it was soon disabled by default: https://github.com/apache/httpd/commit/3dd6fb6882ae2b453c90d51e777e88bc420a0cb1 https://github.com/apache/httpd/commit/3dd6fb6882ae2b453c90d...

quesera 12y ago

Absolutely. They're interpreting the situation with strict literality because it is in their benefit to do so. They have a perfectly valid reason for what they do: it's strongly beneficial to their business model to operate in a scummy but probably-legal way. They are hardly unique in this. Since we have little market recourse (Verizon is often the only option, and we are not customers of Turn), and we have no legal recourse (again, scummy but almost certainly legal in almost all circumstances)...what is left? Well, there are technical solutions to the problem. TLS is a good start. Browsers can be smarter about third party cookies. The Verizon Overcookie can be stripped by a proxy. VPN can solve many problems... This glommed on tracking junk is fragile. I strongly resent being drawn into the arms race, but it is winnable. It will take something dramatic (and who knows how long) for our outrage to be shared by a critical mass of customers/voters, so for now, I think technology is the solution. But I donate to EFF too.

cpeterso 12y ago

This is why Apache added code to ignore IE10's DNT header: http://www.cnet.com/news/apache-web-software-overrides-ie10-do-not-track-setting/ http://www.cnet.com/news/apache-web-software-overrides-ie10-... https://github.com/apache/httpd/commit/a381ff35fa4d50a5f7b9f64300dfd98859dee8d0 https://github.com/apache/httpd/commit/a381ff35fa4d50a5f7b9f... but, ironically, it was soon disabled by default: https://github.com/apache/httpd/commit/3dd6fb6882ae2b453c90d51e777e88bc420a0cb1 https://github.com/apache/httpd/commit/3dd6fb6882ae2b453c90d...