Ehsan Akhgari

Hmm, I believe this issue is misrepresenting the actual attack that I had in mind. This isn't about users clearing cookies at all (which is an activity that the majority...

> It's possible I'm misunderstanding the goal of fingerprinting here. The [FP-STALKER paper you linked](https://hal.inria.fr/hal-01652021/document) says "websites use browser fingerprinting as a way to regenerate deleted cookies", which is the...

> The threat of noticing a gradual change over time does seem quite relevant to any effort to combat fingerprinting. Sites that a user visits frequently have more of a...

> I don't know the heuristics for either installation or BackgroundSync frequency. It seems that [this document](https://docs.google.com/document/d/1c9sQIF4QzzvAxbVCK9XjpIToGB8dq8w1-avQWkzKLK4/edit) explains the privacy considerations Chrome has taken with this API. I quote from...

Gecko bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1290481

> I feel like you're asking for a very different model, in which we enumerate the needs of all parties (users, publishers, advertisers) in advance. It seems like such lists...

> (Arrgh I'm really sorry that we can't get into this in person at TPAC!) Me too. On the other hand having this discussion in a forum accessible to the...

I'd like to keep focusing on the main topic of this issue if that's OK. The problem that I have with the current special treatment of advertisements (and really targeted...

> > we should establish for example what identity principles are in the interest of users and match user expectations, then figure out what those principles would mean in terms...

> I feel like the "can't link identity across first parties" basic principle stands on its own, and that the advertising use cases come into play in the trade-offs section....