Difference between revisions of "Anonymous"
From MgmtWiki
(→Solution) |
(→Problem) |
||
| Line 5: | Line 5: | ||
==Problem== | ==Problem== | ||
| + | * While some users may think that their attributes on distinct [[Web Site]]s cannot be correlated, research has shown that this goal will not be possible<ref>Gina Kolata, ''Can Data be Fully Anonymous? New Algorithms can still identify you'' New York Times (2019-07-24) p A8.</ref> That reality does not prevent users from trying to use [[Pseudonym]]s to remain [[Anonymous]], but it will never work against a determined adversary. | ||
#All HTTP connections come with an [[IP address]] which is often unique to the location of the computer. | #All HTTP connections come with an [[IP address]] which is often unique to the location of the computer. | ||
#All HTTPS (secure) connections come with a session [[Identifier]] which is needed to maintain the secure connection. | #All HTTPS (secure) connections come with a session [[Identifier]] which is needed to maintain the secure connection. | ||
Revision as of 10:29, 24 July 2019
Full Title or Meme
Literally Anonymous means no name.
Context
HTTP ( used on Web Sites) was designed to operate without any identification and the REST protocol enforces that paradigm.
Problem
- While some users may think that their attributes on distinct Web Sites cannot be correlated, research has shown that this goal will not be possible[1] That reality does not prevent users from trying to use Pseudonyms to remain Anonymous, but it will never work against a determined adversary.
- All HTTP connections come with an IP address which is often unique to the location of the computer.
- All HTTPS (secure) connections come with a session Identifier which is needed to maintain the secure connection.
- Most Web Sites record all HTTP connections for security purposes.
- If the user expects any continuing from on sign in to the next, some sort of user Identifier is required.
Solution
- The most trustworthy Web Sites will tell you when they identify you, but it has not be historically necessary that they do so.
- Current legislations from the EU and California requires Web Sites to be more forthcoming about how they collect and use data.
References
- ↑ Gina Kolata, Can Data be Fully Anonymous? New Algorithms can still identify you New York Times (2019-07-24) p A8.
