December 13th, 2021

Replying to a tweet from @nileshtrivedi

I don’t agree with your assertion that “The real problem isn’t that the code comes from a third-party. It is that the third-party can change the code arbitrarily.” A tracking script with subresource integrity is still a tracking script.

11:42pm

51° N , 0° E

Also on Twitter

Reply Retweet Favourite

« Newer Older »

Responses

Nilesh

Sure, but it doesn’t have to be “arbitrary” code which the article warns. On tracking, I worry that if server-side tracking becomes popular (all sites share traffic data with an analytics company), users will not have as many tools to resist as the browser provides.