about summary refs log tree commit diff stats
diff options
context:
space:
mode:
authorJosh Rickmar <jrick@devio.us>2012-08-28 12:14:58 -0400
committerJosh Rickmar <jrick@devio.us>2012-08-28 12:14:58 -0400
commit0a0ca99d9da8ee18c2901ce6f9e53a256ee9f4d9 (patch)
tree836866663f01777278ef5d9c627211ffd128d730
parentb23c5c0fd7a96753786233861f6757c5466143ee (diff)
downloadxombrero-0a0ca99d9da8ee18c2901ce6f9e53a256ee9f4d9.tar.gz
Mention how panopticlick is bad for copying header info
-rw-r--r--xombrero.17
1 files changed, 7 insertions, 0 deletions
diff --git a/xombrero.1 b/xombrero.1
index 939431a..73021bf 100644
--- a/xombrero.1
+++ b/xombrero.1
@@ -1342,6 +1342,13 @@ Because this setting rotates through Accept headers on each text/html
 request, a single page may rotate through more than one Accept header
 if multiple text/html requests are made.
 .Pp
+Please be aware that not all websites report browser headers correctly.
+Most notably, EFF's panopticlick service also reports the HTTP
+Accept-Encoding headers on the same line as the Accept headers.
+If you are trying to find the headers of another browser to model that
+browser's fingerprint, it is recommended to not use panopticlick for
+this reason.
+.Pp
 Note that this setting only rewrites the Accept header for text/html
 requests.  Other requests will use WebKit's default  Accept header.
 .It Cm http_proxy_starts_enabled