Easy there.
IE10 defaults to Do Not Track enabled. So sending the header is not explicitly representative of the user's wishes.
Convenient, isn't it?
Easy there.
IE10 defaults to Do Not Track enabled. So sending the header is not explicitly representative of the user's wishes.
Convenient, isn't it?
"By signing up for [insert service here], you agree to the privacy policy."
How many times did you actually agree with the privacy policy? Devil's advocate, I know, but it's a sobering reminder that pretty much anything you use gives information that is sold. Open a bank account? If so, notice any new junk mail? Pretty hard to live life without a bank account. Your information is still sold to third parties.
Live by the T&C, die by the T&C - unless you can hide your scumminess through underhanded or obfuscated tactics.
> Convenient, isn't it?
That might be an excuse, but it's not the reason. They easily could read the DNT header and the user agent, and trust DNT headers from non-IE10 browsers.
They have a perfectly valid reason for what they do: it's strongly beneficial to their business model to operate in a scummy but probably-legal way. They are hardly unique in this.
Since we have little market recourse (Verizon is often the only option, and we are not customers of Turn), and we have no legal recourse (again, scummy but almost certainly legal in almost all circumstances)...what is left?
Well, there are technical solutions to the problem. TLS is a good start. Browsers can be smarter about third party cookies. The Verizon Overcookie can be stripped by a proxy. VPN can solve many problems... This glommed on tracking junk is fragile.
I strongly resent being drawn into the arms race, but it is winnable.
It will take something dramatic (and who knows how long) for our outrage to be shared by a critical mass of customers/voters, so for now, I think technology is the solution.
But I donate to EFF too.
http://www.cnet.com/news/apache-web-software-overrides-ie10-...
https://github.com/apache/httpd/commit/a381ff35fa4d50a5f7b9f...
but, ironically, it was soon disabled by default:
https://github.com/apache/httpd/commit/3dd6fb6882ae2b453c90d...
The sooner we have a full list of all companies which are doing business with Turn, the happier I'll be, since that would provide me with a better target for my (admittedly excessively) strongly-worded frustration.