Forum Moderators: open

Message Too Old, No Replies

HSTS "super cookies".extremely persistent.especially in Safari

“Private” or “incognito” browsing modes do not help.

         

Leosghost

11:18 am on Jan 6, 2015 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



A UK consultant has demonstrated how a feature of the secure Web protocol HTTPS can be turned into a tracking feature that is, in the case of some browsers, ineradicable.


[theregister.co.uk...]

lammert

11:37 am on Jan 6, 2015 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



And one of the three authors of the RFC describing this protocol is a Google employee.
Also interesting is that these super cookies are readable by any website you visit, not just the website which placed it.

engine

4:49 pm on Jan 6, 2015 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



This supercookie is just the sort of thing that gets the privacy advocates worked up. Rightly so, imho.

toidi

5:43 pm on Jan 6, 2015 (gmt 0)

10+ Year Member Top Contributors Of The Month



This helps explain why google wants all sites to go https!