Hacker News Reader

I love the intention here -- but it seems obvious that this will just push advertisers to set up a subdomain that points to advertisers -- and advertisers will use ip address and/or browser fingerprinting to track across domains.

... and we'll end up right where we are today.

View on HN

Giving another company the ability to serve content (javascript) on a subdomain would make ad companies prime targets for all kinds of hacking campaigns. Their ability to serve javascript and probably access session cookies on a large number of domains would turn them in some kind of skeleton key. This is bad for both the advertisers, the websites serving their ads and the visitors of those websites.

I certainly hope people would think twice about actually implementing something like that.

"Well we either run the ads with subdomains, or say goodbye to funding and our jobs."

>and advertisers will use ip address and/or browser fingerprinting to track across domains.

and people will come up with ways to set and spoof what kind of headers their browser sends.

but your right, where we are today is where people that care enough to circumvent tracking, do circumvent it.

Reply on news.ycombinator.com