EFForg / EFForg/privacybadger

Detect etag supercookies

Open
#2,136 6 comments 4 reactions 1 assignee Claimed by @bcyphers View on GitHub
enhancement heuristic
Dominant language
JavaScript
Stars
3.8k
Forks
435
Avg merge
49m
Merged PRs (30d)
1

Description

[Etags](https://en.wikipedia.org/wiki/HTTP_ETag) can be [used as supercookies](https://samy.pl/evercookie/). Detecting them is not totally trivial, because they are a multi-purpose technology that can be used innocently, but the fact that Nginx and Apache have standard recipes for setting them means that we should in principle be able to detect and act upon their non-standard uses.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.