If your goal is to limit tracking, this does help, however it won't stop any server to server (versus client browser to server) data pass through. Any events the advertiser/publisher deems important, they can first-party collect the relevant tracking data and pass it from their server to the ad server (i.e. TikTok, Google, MS, FB etc.)

Is this actual or just theoretical? I think most sites are doing the simplest thing. https://ads.tiktok.com/help/article?aid=9663

Actual. Tiktok: https://ads.tiktok.com/help/article?aid=10003669 FB: https://developers.facebook.com/docs/marketing-api/conversio... Google: https://developers.google.com/tag-platform/tag-manager/serve...

You're right most are doing the simplest things as most marketers do not have tech experience to understand the advanced methods. As more people try to prevent Javascript, you'll start to see more and more companies adopt these methods.

Exactly, with a Pi-Hole.

Regex blacklist:

  (\.|^)tiktokcdn\.com$ 
  -tiktokcdn-com.akamaized.net$  
  (\.|^)tiktokv\.com$ 
  (\.|^)musical\.ly$ 
  (\.|^)tiktok\.com$

Yes, if you’re lazy or you want to quickly switch some services on/off, I suggest you the great app: Pi-Hole Remote (https://rocketscience-it.nl), there's a handy list with all of the privacy intrusive services (regex) that you can turn on/off with a switch (screenshot https://ibb.co/fNDyq36)

Unfortunately, the TikTok app falls back on DoH if it detects domain blocking.

https://www.reddit.com/r/AppSecurity/comments/f422f3/tiktok_...

At least it'll stop people who don't have the TikTok app being tracked though.

That's ok, DoH firewall rules to the rescue! You can get lists of all known DoH servers and just load them up on a router, drop anything going there, and you're done.