News for hackers. Stuff that matters.
Re:Blink-Dev – Intent to Deprecate and Freeze: The User-Agen... by LeonM on Tuesday January 14, 2020 @07:41AM (#22044224)
Good.

The only legitimate use case I can think of is exception tracking, it is valuable to know which browser caused the exception.

Beyond that, a website should never, ever rely on the UA for anything.

Re:Blink-Dev – Intent to Deprecate and Freeze: The User-Agen... by smitop on Tuesday January 14, 2020 @07:53AM (#22044308)
It is still possible to determine what browser caused an exception. The "sec-ch-ua" header is used by Chrome (but only to HTTPS websites) to send the "real" user agent, which for me is "Google Chrome 79" (and I am indeed running Google Chrome 79).
Re:Blink-Dev – Intent to Deprecate and Freeze: The User-Agen... by Tade0 on Tuesday January 14, 2020 @07:50AM (#22044290)
Last time the UA string was useful to me was to show my SO's uncle that iOS Edge is just a "repackaged and watered down version of Safari".
Re:Blink-Dev – Intent to Deprecate and Freeze: The User-Agen... by saagarjha on Tuesday January 14, 2020 @08:42AM (#22044615)
My user agent is "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1 Safari/605.1.15". Clearly I'm running a repackaged Firefox browser?
Re:Blink-Dev – Intent to Deprecate and Freeze: The User-Agen... by AgloeDreams on Tuesday January 14, 2020 @10:24AM (#22045555)
In fairness, real (Trident) Edge fakes the Chrome UA. But yeah all iOS browsers are just WebKit.
Re:Blink-Dev – Intent to Deprecate and Freeze: The User-Agen... by qwerty456127 on Tuesday January 14, 2020 @07:43AM (#22044243)
IMHO you're right but underestimate the value of what you have mentioned. It is VERY valuable to know which browser caused the exception.
Re:Blink-Dev – Intent to Deprecate and Freeze: The User-Agen... by jmcs on Tuesday January 14, 2020 @07:57AM (#22044339)
Maybe after people stop using the user agent for stupid reasons it can be made useful again. User agents should be stuff like "Firefox 71.0" or "Chrome 79.0.3945", not "Mozilla but really AppleWebKit disguised as KHTML, but no really I'm Chrome but maybe I'm Safari"
Re:Blink-Dev – Intent to Deprecate and Freeze: The User-Agen... by HorstG on Tuesday January 14, 2020 @10:05AM (#22045309)
Yes, but unfortunately using the user agent for only non-stupid reasons is a postcondition for the hell freezing over.
Re:Blink-Dev – Intent to Deprecate and Freeze: The User-Agen... by GoblinSlayer on Tuesday January 14, 2020 @08:58AM (#22044729)
Hopefully people will think twice before doing stuff that depend on browser.
Re:Blink-Dev – Intent to Deprecate and Freeze: The User-Agen... by thrower123 on Tuesday January 14, 2020 @09:52AM (#22045179)
Realistically, we will just find another, more complicated and more opaque, and more error-prone, method of fingerprinting the browser version.
Re:Blink-Dev – Intent to Deprecate and Freeze: The User-Agen... by zzzcpan on Tuesday January 14, 2020 @08:44AM (#22044641)
There are plenty of legitimate purposes. I use it to disable keepalive for POST requests, redirect to https:// for browsers known to be able to establish a secure connection, whitelist tor browser bundle, detect behavior of Accept: header, which differs even between browser versions, and some other things.