News for hackers. Stuff that matters.
Re:WebKit Tracking Prevention Policy by tuxone on Thursday August 15, 2019 @07:44AM (#20704278)
Also, a tracking service could just ask to be CNAMEd to a random subdomain and become everybody’s “first party”, couldn’t it?
Re:WebKit Tracking Prevention Policy by om2 on Thursday August 15, 2019 @12:35PM (#20706787)
It could, but access through these various CNAMEs would not give it stateful cross-site tracking ability, since each would be a different Origin. It would be providing a hosted first-party analytics/ads/whatever service within the storage space of the first party.
Re:WebKit Tracking Prevention Policy by randall on Thursday August 15, 2019 @12:41PM (#20706870)
Additionally, people who own the sites can use them together via methods like this, while third parties will have a more difficult time. Bravo.
Re:WebKit Tracking Prevention Policy by lmkg on Thursday August 15, 2019 @07:56AM (#20704348)
This has been a feature of Adobe Analytics for over a decade. Google Analytics doesn't currently offer this as a feature, but some enterprising individuals have explored how to hack it in after ITP 2.1 was announced.