Re: [w3ctag/design-reviews] HTTP State Tokens (#297)

@dbaron your concern is valid. In this light the change would look like a regression, with respect to the current mechanism. One way to address would be to bake in some negotiation process to actually request the token. Then again, probably most sites would end up using this, so it ends in 'all are tracking' status.

That's a consequence of the token-based state management working as a reliable identifier/fingerprint.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3ctag/design-reviews/issues/297#issuecomment-442356679