On https://panopticlick.eff.org/ EFF let you test the number of uniquely identifying bits that the browser gives a website. Among these are HTTP header fields such as User-Agent, Accept, Accept-Language and later perhaps ETAG and If-Modified-Since. Also there is a lot of Information that javascript can get from the browser such as time-zone, screen resolution, complete list of fonts and plugins available.

My first impression is, is all this information really used/required on a majority of all websites? For example, how many sites does really send different content-types depending on the http accept header, or what fonts are available(I thought css had taken care of this)?

Let's say of these headers/js functionality on day would be gone.
Which ones would;

  • never be noticed they were gone?
  • impact user experience?
  • impact server performance?
  • immediately reimplemented because the Internet cannot work without it?

Extra credit for differentiating between what can be done, what should be done and what is done in most situations.

  • 1
    Does this belong to stackoverflow – proy Jan 30 '10 at 9:48
  • 1
    stackoverflow is programming. Serverfault is servers and hosting. This question is probably best addressed from the hosting/server-admin crowd rather than programmers or 'power users'. – MidnighToker Jan 30 '10 at 11:32
  • I would put this on the webmasters stack exchange site: webmasters.stackexchange.com – SLY Jan 29 '11 at 20:54
  • I could go with sending this over to webmasters. I can only answer the philosophical half of the question... – voretaq7 Feb 4 '11 at 16:45
  • As can be seen this question has already been moved once, then to the currently best location. Now there is a new better location so I have asked the moderator to move it again. – hultqvist Feb 6 '11 at 10:45

I can't really answer the question of what information would be missed, though I will say from an analytics standpoint we do tend to care about the browser and OS our users are visiting with (to determine what HTML features we can get away with using).

Philosophically I can give you my view on the sitiation--

What CAN be done falls in to two categories:
* Maliciously we can identify a user with some degree of certainty based on their browser signature, as Panopticlick demonstrates.
* Benignly we can tailor a site's experience based on the information provided ("leaked") by the browser.

What SHOULD be done? Probably the benign thing above, offering customized site experiences based on the technology available to the user.

What IS done? Typically site designers just throw a single site experience out there, which requires some set of plugins. If you don't have those plugins you get the "broken/missing plugin" box and/or a prompt from your browser/OS to install the appropriate plugin. Lousy user experience, but easier for the designers :)


What do you mean by usable? Do you mean which ones have legitimate uses or which ones are usable to those interested in tracking or gaining more information about users? If it's the latter then I believe the idea is that it's by taking all of these data points together that a unique "fingerprint" can be created for each browser.

If you're asking about which features have legitimate uses, then I'd say almost all of them. The HTTP accepted/preferred content-type headers are useful for a variety of applications which can't be substituted for using CSS. Namely it provides a standard method for content negotiation. (Different user-agents prefer/support different content types or languages.)

Things like browser plugin availability, screen resolution, and local data storage have obvious uses. Without these features a lot of the web apps you use wouldn't function or wouldn't be as useful as they are.

What fonts are available is gotten through Flash, and that's about the only feature that has a very limited use for general web apps. However, even that has its uses. For instance, it has enabled some very useful font-related flash apps to be developed (e.g. font identification/suggestion tools).

  • I changed the word "usable" to "required" to better reflect my intention with the question. Yes everything can be usable, but very few websites break if they doesn't get the list of fonts, except your last example. – hultqvist Feb 7 '11 at 10:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.