Home / Blogs

Even if Do-Not-Track Were a Good Idea, Could It Ever Work?

John Levine

In a recent article, I read about increasingly intrusive tracking of online users, which has lead to a proposal at the FTC,

FTC Chairman Jon Leibowitz said the system would be similar to the Do-Not-Call registry that enables consumers to shield their phone numbers from telemarketers.

Maybe I'm dense, but even if this weren't a fundamentally bad idea for policy reasons, I don't see how it could work.

The phone system is regulated to the extent that there is a well defined set of phone numbers, and the overwhelming majority of phones used by consumers have one or perhaps two numbers. If I travel with my mobile phone, its number stays the same no matter where I am. A phone number is a fine identifier to use in the no-call database.

For do-not-track. what's the identifier? Your IP address? Most ISPs assign addresses with PPP or DHCP so they change anywhere from once an hour to a few times a year. My ISP uses a "carrier NAT" so that their residential customers have no unique external IP address at all. When I travel with my laptop, I get whatever IP a hotspot or hotel happens to assign me, typically hidden behind a NAT. And on a lot of ISPs, when users fetch web pages, the remote site sees the IPs of the ISP's web cache, not the individual users.

As an alternative, for web tracking, I could imagine that the FTC could ask the IETF to invent a no-track header to be sent with each HTTP request, along with all of the other options like preferred language that a browser sends now. But that header has to be programmed into every web browser, every mail program that renders HTML mail, every web server, and every web cache and proxy, which, if we're really diligent, might cover half of the users in two or three years.

Even if we do have a no-track header, we're still in the situation other people have outlined, with bad guys just ignoring it, and little way to even tell that they're doing so, much less get the FTC to act on it.

In my experience, the FTC is not dumb, so my most charitable interpretation of this proposal is that they know it won't work, but they figure they have to show they tried and failed before they can go back to Congress and ask for something reasonable, like only track people who opt in and say it's OK.

In the meantime, Firefox users might enjoy a browser add-on called Ghostery which lets you see how many trackers web sites offer you (a lot, it's impressive) and decide which of them you want to accept.

By John Levine, Author, Consultant & Speaker. More blog posts from John Levine can also be read here.

Related topics: Policy & Regulation, Privacy, Web

 
   

Don't miss a thing – get the Weekly Wrap delivered to your inbox.

Comments

To post comments, please login or create an account.

Related Blogs

Related News

Explore Topics

Dig Deeper

Afilias Mobile & Web Services

Mobile Internet

Sponsored by Afilias Mobile & Web Services
Afilias

DNS Security

Sponsored by Afilias
Verisign

Cybersecurity

Sponsored by Verisign

Promoted Posts

Now Is the Time for .eco

.eco launches globally at 16:00 UTC on April 25, 2017, when domains will be available on a first-come, first-serve basis. .eco is for businesses, non-profits and people committed to positive change for the planet. See list of registrars offering .eco more»

Industry Updates – Sponsored Posts

Radix Announces Global Web Design Contest, F3.space

.TECH Gets Its Big Hollywood Break

Verisign Named to the Online Trust Alliance's 2017 Audit and Honor Roll

Major Media Websites Lose Audience Due to Slow Load Times on Mobile

Leading Internet Associations Strengthen Cooperation

i2Coalition to Present Tucows CEO Elliot Noss With Internet Community Leadership Award

DeviceAtlas' Deep Device Intelligence Now Addresses Native App Environment

A Look at How the New .SPACE TLD Has Performed Over the Past 2 Years

Michele Neylon Appointed Chair Elect of i2Coalition

2016 U.S. Election: An Internet Forecast

MarkMonitor Supports Brand Holders' Efforts Regarding .Feedback Registry

Why .com is the Venture Capital Community's Power Player

Miss.Africa Announces 2016, Round II Seed Funding Tech Initiative for Women in Africa

Airpush Chooses DeviceAtlas to Provide Device Awareness to Mobile Ad Network

DeviceAtlas Releases Q2 2016 Mobile Web Intelligence Report, Apple Loses Browsing Market Share

Effective Strategies to Build Your Reseller Channel (Webinar)

Facilitating a Trusted Web Space for Financial Service Professionals

Verisign Named to the Online Trust Alliance's 2016 Honor Roll

News.Markets: A Rising Star in the World of Financial Trading and New TLDs

Mobile Web Intelligence Report: Bots and Crawlers May Represent up to 50% of Web Traffic