Anyone have good privacy resources for mobile/iOS. My phone security is nowhere near where it should be.
Disclosure: I maintain the site
They plan to (eventually) only send this to Verizon-owned (or contracted) servers. This has two roughly equivalent corollaries:
1. They don't need to use a header for this because they can trivially accomplish the same thing with a database of IP addresses.
2. They can trivially accomplish this with a database of active IP addresses, so it doesn't really matter if they use a header or not.
Incidentally, other ISPs do this too, but for more benign reasons because they don't (as far as I know) own an ad network: for example, T-Mobile automatically logs you in to My T-Mobile when you access it over 3G. Basically, if your ISP wants to track you, they will have no trouble with this (except to the extent that they can be stopped with SSL). You'll just have to switch ISPs, if possible.
I guess it could be automated in a small way too, such that if the cookie was detected as being returned to the browser then the site gets flagged and it won't get it again.
Alternatively, only add the cookie when requesting pages from partner sites known to be tracking it.