I developed a protocol for recording visits specifically designed to prevent publishers from piggybacking on it to identify users. Essentially, one less place for a supercookie.

However, it relies in part on a particular HTTP header, so from an information theoretic standpoint it will dramatically narrow the pool of candidates. Good enough for an individual who doesn't want to be profiled for advertising, not good enough for someone worried about advanced persistent threats.