Re:No Cookie for You
by Macha on Thursday December 17, 2020 @01:19PM
(#25458449)
How do you create the hash? If it's based on something that you can derive from the user (let's say sha1(IP address + User Agent), that seems pretty clearly identifying. If you generate a random identifier but save that identifier in their cookies and send it back next time, also pretty clearly identifying.
[ Parent
| on HN ]
> How do you create the hash? If it's based on something that you can derive from the user (let's say sha1(IP address + User Agent), that seems pretty clearly identifying.
of course that is forbidden. and that's exactly why it is really hard to tell if companies honor it.