|
|
Joined: May 2008
Posts: 753 Likes: 1
Old Hand
|
|
Old Hand
Joined: May 2008
Posts: 753 Likes: 1 |
So I have started seeing hits for http://www.vanning.com/.well-known/dnt-policy . text in my logs, which lead me to https://www.eff.org/dnt-policy. How does this work with ubb? Seeing as we record IP addresses?
"No matter where you go, there you are."
"If you can't do something smart, Do something right"
"There are three kinds of people in the world, those who can count, and those who can't"
|
|
|
|
|
Joined: Jun 2006
Posts: 16,256 Likes: 113
|
|
Joined: Jun 2006
Posts: 16,256 Likes: 113 |
It's just a mobile browser (or scanner) looking for /.well-known/dnt-policy, kind of how some look for browserconfig.xml. The file itself is a privacy policy for the do-not-track feature sent by some browsers. If you don't have one, that site you indicated gives you a template that you can use. The policy is for you to list what you collect and how it's used. UBB.threads stores IP addresses, we can use this data to ensure that if your account is hacked we can see a different "last login" ip address vs those posts that could have been made by someone else. We do not share or otherwise use said data, but if your community does make use of that data (such as for statistics), you'd display it in your sites privacy policy. That page covers it all though, just read further down: Why would a domain post this policy?
A domain operator may choose to post this policy because it wants to meet best-practices privacy standards, and comply with user opt-outs from tracking. It may also comply because it wants to signal to privacy protection software (like Privacy Badger, Disconnect, or AdBlock) that it respects Do Not Track, so that its third-party embeds are less likely to be blocked.
In the former case a site may post the policy on most or all of the subdomains that it operates; in the latter case it is more likely to be posted on domains intended for third-party embedding only.
|
|
|
|
|
Joined: Jun 2006
Posts: 16,256 Likes: 113
|
|
Joined: Jun 2006
Posts: 16,256 Likes: 113 |
I merged your posts, because it's the same real question.
You're either getting legit requests from user browsers, or someone is scanning your site for files (probably whatever crawling engines support said content).
If it's a legit user request it'll just auto query for said file when they connect to your site, there isn't really anything you *have* to do, but you *can* support those files, if you choose to.
|
|
|
|
|
Joined: Apr 2004
Posts: 1,944 Likes: 144
|
|
Joined: Apr 2004
Posts: 1,944 Likes: 144 |
Its caused by a person visiting your website who has this (or similar) browser add-on installed: https://www.eff.org/privacybadgerEFF’s DNT Policy and Privacy Badger
Faced with the failure of the W3C process, EFF devised a two-pronged strategy that would provide immediate self-defense for users against tracking, while simultaneously giving advertisers an incentive to stop non-consensual tracking.
First, EFF began work on a DNT policy of its own, based on stronger privacy criteria than would have been possible at the W3C. EFF's DNT policy requires that users who have turned on the DNT signal are not tracked without their clear and informed consent. Otherwise, it has strict limitations on what data can be collected and how long that data can be retained. (It also includes exceptions that respect the ordinary functionality of a site, that allow measures for security purposes and prevent fraud, and allow data analysis techniques that protect the anonymity of the users.) The policy was launched in August 2015 together with a coalition including software companies Disconnect and Adblock, analytics provider Mixpanel, the publisher Medium.com and search engine DuckDuckGo. In autumn 2015 Adzerk became the first advertising company to announce support for the policy.
And what if a website doesn't commit to honoring EFF's DNT policy? That's where the second prong of EFF's strategy comes in: a browser extension for Firefox and Chrome, called Privacy Badger, which blocks tracking and enforces DNT even in the absence of voluntary industry compliance.
Privacy Badger works by watching for third party calls on websites, checking if they are present over multiple sites, and blocking them if they appear to be related to tracking. To the user, the most visible result is that ads end up being blocked, because most ads have a tracking component built in to them.
Despite this, Privacy Badger is not an adblocker, but rather a tracker blocker, intended to incentivize ad-tech companies to develop privacy-friendly forms of advertising. Whereas adblockers punish all publishers indiscriminately, Privacy Badger offers good actors the option of having their content (including ads) unblocked if they adopt EFF's DNT policy.
In other words, the Privacy Badger/DNT Policy mechanism offers publishers, advertisers and third parties access to a universe of users from which they are otherwise excluded, if they play fair, thus giving them an incentive to change their ways. EFF's goal is to persuade other content blockers to also block based on whether or not a website follows EFF's DNT policy and reward companies who commit to respecting users' privacy preferences. SOURCE: https://www.eff.org/issues/do-not-track
|
|
|
|
|
Joined: May 2008
Posts: 753 Likes: 1
Old Hand
|
|
Old Hand
Joined: May 2008
Posts: 753 Likes: 1 |
The .Well-known/ folder is apparently created by Letsencrypt, not a folder I can make
"No matter where you go, there you are."
"If you can't do something smart, Do something right"
"There are three kinds of people in the world, those who can count, and those who can't"
|
|
|
|
|
Joined: Jun 2006
Posts: 16,256 Likes: 113
|
|
Joined: Jun 2006
Posts: 16,256 Likes: 113 |
On Unix or Linux servers, directories prefixed with a . are hidden, so .well-known would be hidden unless your ftp client is set to read hidden content.
|
|
|
|
|
Joined: Jun 2006
Posts: 16,256 Likes: 113
|
|
Joined: Jun 2006
Posts: 16,256 Likes: 113 |
|
|
|
|
|
|
|
Site Map
by Outdoorking - 12/05/2023 5:26 PM
|
|
|
|
|
|
|
|
