Hacker News new | ask | show | jobs
by mgrund 1585 days ago
Absolutely not a coincident that Google is proposing a protocol that allows protocol level user tracking. By making the session ticket server-initiated and not client-controlled all control is also stripped from the user.
1 comments

The clients are free to make another "connection" and get a new session id every time they want. It's similar to http connection reuse: the src ip-port + dst-port also acts as a "session identifier", as long as multiple requests flow throug the same TCP connection.
Browsers are also free to use per site caches instead of a global one and sadly we ended up with just that because it turns out you cannot trust the internet with user privacy in any way.
Bad example. Browsers have had per-site caches since between 2013 (Safari) and 2020 (Chrome, Firefox).
Yeah that's sad. My take was just that the problem is not caused by the transport protocol.