News for hackers. Stuff that matters.
Re:Undeletable Cookies by ck2 on Tuesday August 16, 2011 @02:01PM (#2892215)
That's a good point and this would not be practical in a regular browser session but if someone chooses private browsing, an extension could be sure to strip "last-modified" as well as "if-none-match".

Would hurt the server a little and reduce speed because there would not be any caching but still helps guarantee no tracking.

Re:Undeletable Cookies by ars on Tuesday August 16, 2011 @03:48PM (#2892606)
On a properly written server you could "fuzz" the date of "if-none-match". Then it would still work for caching, but would not uniquely identify you.

The trouble is that most servers are not written properly, the date is not parsed, rather it's string compared with the file date.

For example if the server sends the timezone as EST vs +0400 the browser will send it back exactly as it gets it, when normally you would think that should not matter.