W3C home > Mailing lists > Public > public-media-capture@w3.org > September 2014

Re: deviceId and fingerprinting (or user tracking)

From: Martin Thomson <martin.thomson@gmail.com>
Date: Fri, 26 Sep 2014 07:58:00 +0100
Message-ID: <CABkgnnWEBgNv4omben938PzYmQVcsxBEHXTaqANJ57iQwh0sXQ@mail.gmail.com>
To: Shijun Sun <shijuns@microsoft.com>
Cc: "public-media-capture@w3.org" <public-media-capture@w3.org>
On 25 September 2014 17:21, Shijun Sun <shijuns@microsoft.com> wrote:
>
> The deviceId is currently defined as an identifier which must be *persistent* between application sessions.  So a website can get the same deviceId's when a user visits the website using the same system, calling gUM() or not.  Should we expect the deviceId's for any specific website be (largely) consistent across all systems?  Otherwise, in the worst case when the Id is unique to each system, the website can potentially track the user.

The requirement is that any deviceId information is cleared when
cookies are cleared.  Thus, it doesn't offer any better tracking
capability than is already available.
Received on Friday, 26 September 2014 06:58:28 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 16:26:30 UTC