Post Reply 
Removing ETag from header
Aug. 16, 2011, 09:25 PM
Post: #1
Removing ETag from header
I need a simple filter that removes all ETags from headers.

They could be used to track users the same way, as persistent cookies.

Thanks
Add Thank You Quote this message in a reply
Aug. 17, 2011, 02:22 AM
Post: #2
RE: Removing ETag from header
Code:
[HTTP headers]
In = TRUE
Out = FALSE
Key = "ETag:  Remove All  (In)"
Match = "\1&$LOG(CGET $DTM(c) : ETag removed: \1)"

http://www.google.com/search?q=tracking+without+cookies

Have fun
Add Thank You Quote this message in a reply
[-] The following 1 user says Thank You to JJoe for this post:
herbalist
Aug. 17, 2011, 04:35 AM
Post: #3
RE: Removing ETag from header
@JJoe, thanks a lot! It works well.
Why it's not in the default set?
Add Thank You Quote this message in a reply
Aug. 17, 2011, 10:52 AM
Post: #4
RE: Removing ETag from header
Thank you so much JJoe!

I have zero cache on Fx, Opera and Iron but IE requires a small one so I am glad to have this filter.

Like Ozo, why is this filter not in the default set?
Add Thank You Quote this message in a reply
Aug. 17, 2011, 11:30 AM
Post: #5
RE: Removing ETag from header
why not in default set?

um, that's easy - 'cause nobody heard of this until now Smile!
Add Thank You Quote this message in a reply
Aug. 17, 2011, 12:32 PM
Post: #6
RE: Removing ETag from header
This goes back to 2000 and a Fx bug from that era that has never been fixed and has now been resurrected with all the publicity about Kissmetrics.

Lots of links and info in this thread:
http://www.dslreports.com/forum/r2621028...vives-Wipe
Add Thank You Quote this message in a reply
Aug. 18, 2011, 12:56 AM
Post: #7
RE: Removing ETag from header
interesting...

i seem to recall a conversation with sidki back in the day when we e-mailed every so often, that "theoretical" entities really aren't intended to be included in his config, "out in the wild" entities are well-documented by sidki...

so i can assume his config didn't worry about ETag tracking because it was not encountered "out in the wild"...

probably safe to assume that Scott's "default" config didn't include it for the same reason...


just speculating, who knows...
at any rate, i'm glad it was pointed out and we are all protected from this now Smile!
Add Thank You Quote this message in a reply
Aug. 19, 2011, 05:20 PM
Post: #8
RE: Removing ETag from header
As Mele20 said, this is something we talked about before. Last year I created a thread about "evercookie" which was using the ETAG method (and many others) to resurrect cookies. http://prxbx.com/forums/showthread.php?tid=1666
Since then it's becoming more and more common.

Are there any drawbacks removing the ETAG headers? Wouldn't mess up the cache?
What about including it in Sidki's filterset? I remember seeing some cache handling and ETAG headers...
Add Thank You Quote this message in a reply
Dec. 17, 2011, 05:52 PM
Post: #9
RE: Removing ETag from header
hello is this the correct configuration ? as shown in the image below.
thanks.

[Image: rlgj5v.png]
Add Thank You Quote this message in a reply
Dec. 17, 2011, 07:57 PM
Post: #10
RE: Removing ETag from header
(Dec. 17, 2011 05:52 PM)costes Wrote:  hello is this the correct configuration ? as shown in the image below.
thanks.

Looks good. Don't forget to click all the OK's before you use it. If you like it, save it to a config or you will have to add it again.

HTH
Add Thank You Quote this message in a reply
[-] The following 1 user says Thank You to JJoe for this post:
costes
Dec. 18, 2011, 07:38 PM
Post: #11
RE: Removing ETag from header
thanks for the quick response the "etag filter" works perfectly, below pics using i.kissmetrics.com/i.js and http://ip-check.info/?lang=en
who also uses the kissmetric script to question for protected etags. AWESOME.
however the generic signature of any browser by default seems it cannot be changed. any ideas for "Generic Header Pic" number 3?
thank you.

[Image: 35nd4pu.png]
[Image: 20zae7p.png]



================= "Generic Header Pic" ==================


[Image: 5js379.png]
Add Thank You Quote this message in a reply
Dec. 18, 2011, 11:48 PM
Post: #12
RE: Removing ETag from header
(Dec. 18, 2011 07:38 PM)costes Wrote:  any ideas for "Generic Header Pic" number 3?

Answered at http://prxbx.com/forums/showthread.php?t...6#pid15956
Add Thank You Quote this message in a reply
Post Reply 


Forum Jump: