- From: Walter van Holst <walter.van.holst@xs4all.nl>
- Date: Fri, 26 Oct 2012 21:40:20 +0200
- To: public-tracking@w3.org
On 10/26/12 9:15 PM, Roy T. Fielding wrote: >> A cryptographic hash of the IP-address, UA string, the first 7 >> bytes of a 64 bit Unix timestamp salted with the date string would >> suffice to provide a pretty hard to link identifier that would meet >> the needs as you just described. > > I seriously doubt that an identifier that changes at least every 4.27 > minutes, and also at 00:00 UTC, would be useful to anyone. Moreover, > it doesn't take IP masking into account (grouping identifiers by > allocation block). First of all, it was a suggestion. If it would take a few bits less than the first 7 bytes of the timestamp to get to a meaningful timeframe in wich you can in retrospect detect click-fraud, I would consider that a wholly different debate than one in which it is stated you cannot use anonimisation for this purpose. My point was that in order to detect similar http requests in order to discern patterns that are highly likely to be fraudulent, it is probably equally important to be able to group similar http requests than to retain ip adresses, cookies, referrer URLs, URIs etc. > I know Walter wasn't here the last time around, so I'll say this > again: DNT will have no effect on data collection or retention for > the purpose of detecting or preventing malicious activity. Performing > that function in the real world requires both the collection of IP > addresses and the setting of various types of cookies, including > identifier cookies, though not necessarily retaining those cookies on > the server. AFAICT, this is allowed by EU laws because they are > necessary to secure any online service from existing attacks. You are right in that interpretation of EU rules. It should be added though that any use beyond the purpose you mentioned is not necessarily lawful. And it should also be added that if it is possible to achieve the purpose with less data, you should use that avenue instead. > There is no need to mention it in our specs, and no need for the > specs to include anything about local laws and public purpose. These > are simply not our concerns and we have wasted far too much of our > time on them already. I would concur on the latter and tend to think the former is pretty close to the truth. Local laws are indeed not our concern. Public purpose, I'm less sure of. The core concern to me is whether self-regulatory requirements should be included and so far my position would be that they should be explicitly excluded, perhaps with a list of exceptions. By now I am starting to get more interested in MRC's position in this, so I hope Chris and Rigo can work a way out to involve them in this process. Regards, Walter
Received on Friday, 26 October 2012 19:40:54 UTC