Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by buro9 | Hacker News Reader

Parent Full thread

buro9·

That would be a good option for Cloudflare to give site operators.

[ ] Add `Permissions-Policy: interest-cohort=()` header.

View on HN

They should look at the way the wind is blowing and enable this by default for all domains.

edit: in a previous version of this comment I said that Cloudflare should use this mechanism to "kill FLoC in the crib", which is quoted in southerntofu's reply.

I find it worrying that a huge company is pushing an opt-out privacy-hostile feature (you have to send a header so that hopefully they will disable it, if they are in good faith) and the best we can do to fight it is to ask another huge corporation to "kill it in the crib".

Maybe its finally time we stopped using these corporations and their products once and for all and started empowering our own communities instead?

Respectfully, I don’t think your category of “we” is as universal as you think. Privacy-focused people can and largely do use browsers which simply refuse to send this kind of potentially sensitive information; for the rest of us, this new feature is substantially less privacy-hostile than what it’s replacing.

This is definitely worse than the fingerprinting being replaced, because whereas the old methods were inadvertently using browser traits unrelated to user behavior for tracking, this is an intentional feature for user tracking related intentionally to user interests.

It's a replacement for third-party cookies, not fingerprinting.

I agree, here is my public statement on the matter.

https://www.remarkbox.com/remarkbox-is-now-pay-what-you-can....

DNT was dead partially due to Microsoft enabled it for IE by default.

Reply on news.ycombinator.com