News for hackers. Stuff that matters.

A comment on Against privacy defeatism: why browsers can still stop fingerprinting. Parent comment

Re:Against privacy defeatism: why browsers can still stop fi... by tripzilch on Sunday July 01, 2018 @11:27AM (#17435942)
But, if the server sends you a private resource, this implies the server must already know your identity. Being private it's not supposed to send it to anyone else, so it needs to identify you in order to know "does this user have access to this resource?".

Am I missing something here?

[ Parent | on HN ]
Re:Against privacy defeatism: why browsers can still stop fi... by neverfone on Sunday July 01, 2018 @02:05PM (#17436700)
Yes, private doesn't necessarily mean authenticated, it just means shouldn't be saved in a shared cache.

For example, "weather_at_your_geoip.js".

[ Parent | on HN ]