December 13th, 2021

Replying to a tweet from @nileshtrivedi

I don’t agree with your assertion that “The real problem isn’t that the code comes from a third-party. It is that the third-party can change the code arbitrarily.” A tracking script with subresource integrity is still a tracking script.

51° N , 0° E

Also on Twitter

Reply Retweet Favourite



Sure, but it doesn’t have to be “arbitrary” code which the article warns. On tracking, I worry that if server-side tracking becomes popular (all sites share traffic data with an analytics company), users will not have as many tools to resist as the browser provides.

# Posted by Nilesh on Friday, December 17th, 2021 at 7:57am

Have you published a response to this? :