Browser fingerprinting is an easy path toward a “stronger than ip” correlation. [1] is an interesting starting point.
I use uMatrix only experimentally (I rely on NoScript) but it offers a fascinating flexibility of control if one is in the mood. As well, NoScript is near useless when doing stuff with AWS where uMatrix offers the right flexibility (allow from site Y, but only when fetched from site X).
I had heard of uMatrix but didn't realize it had that functionality, which is pretty cool! Thanks for sharing!