On 4/30/07, Thom McGrath <lists at thezaz dot com> wrote:
> HTTP requires that only cookies matching the correct parameters are
> sent back in the request headers. Anything else is a bug of the
> browser. For example, my site could request a cookie be placed on
> realbasic.com. The browser *should* deny this behavior. Regardless, I
> simply won't receive cookies from realbasic.com unless the browser is
> misbehaving. And you are 100% correct regarding the second paragraph,
> something I said in an earlier e-mail.
The browser should absolutely deny your site access to realbasic.com
cookies; however, realbasic.com can set cookies that are not
restricted to that domain. This is the issue about which I am talking,
and which is unprofessional -- there is no reason why realbasic.com
shouldn't limit its cookies to itself (other than advertising or
nefarious purposes).
> Incorrect.
> It is done using IP Lookup. Your IP address can be used to get a
> relative position of your location. No cookies, spyware, etc. necessary.
Not always. I have flushed out cookies from my browser that contained
my zip code. Furthermore, I have also seen advertising that identifies
me as being from one of two cities -- St. Cloud, MN, being one of
them. A simple IP lookup would almost certainly have resulted in this
hit, as this is a relatively large location in terms of Internet
infrastructure in my geographic location. There is virtually no chance
an IP address lookup could zero in on the city in which I live,
especially since it is only several hundred people and no tech
business (compare to the aforementioned city of tens of thousands of
people and a number of tech companies).
Eliminating IP lookups, cookies storing zip codes is the only logical
answer. Certainly IP lookups are possible and are likely done more
than zip codes, but my point is that it is not only possible, but it
does happen.
--
-Adam
dingostick.com
_______________________________________________
Unsubscribe or switch delivery mode:
<http://www.realsoftware.com/support/listmanager/>
Search the archives:
<http://support.realsoftware.com/listarchives/lists.html>
|