IE10 to send "Do Not Track" DNT header by default

https://blogs.technet.com/b/microsoft_on_the_issues/archive/2012/05/31/advancing-consumer-trust-and-privacy-internet-explorer-in-windows-8.aspx?Redirected=true

by cpeterso • 14 years ago

33 36 14 years ago

blogs.technet.com

paulgb• 14 years ago

I like the idea of privacy-by-default, but I can't help thinking they're announcing it prematurely for the PR. It may even undermine voluntary adoption of the tag, since it no longer represents an explicit request not to track.

recoiledsnake2• 14 years ago

They just released a new version of IE10 preview and it's expected to go gold in about 2 months, so they're giving time for websites to prepare before releasing it.

>It may even undermine voluntary adoption of the tag, since it no longer represents an explicit request not to track

I think this is sort of like how Apple disabled third party cookies in Safari on the iPhone by default and then Google was caught circumventing it. It could end up in a PR nightmare for advertizing companies if they don't follow DNT requests, whether opt-in or opt-out.

AdrianRossouw• 14 years ago

meaning nobody will honor it.

ch0wn• 14 years ago

Oh wow, I haven't seen a page that destroyed by Chrome's default to not load insecure content like this one. http://imgur.com/qfdqG

lomegor2• 14 years ago

I've seen worse. Agh, I can't find it now... but some Microsoft website for developers... can't remember which one though.

jarin• 14 years ago

Isn't that kind of behavior just going to lead to websites ignoring it by default?

singingwolfboy• 14 years ago

This is a really bad idea. Most people don't change defaults -- the idea behind DNT is that the people who care about privacy can easily take steps to assure their own privacy. As long as businesses know that browsers sending the DNT header are sending it intentionally, there's a chance that websites will respect it.

With this change, DNT becomes meaningless. How can businesses determine which users are OK with being tracked, and which are not? Since it's technologically easier to simply track everyone, and it makes good business sense to gather as many metrics as possible, businesses will simply argue that they can't respect a header that most people don't know/care about (since it was on by default). That makes things worse for the people who do care about it.

jlarocco4• 14 years ago

I had the exact opposite feeling.

First, everybody cares about privacy. Just because businesses have taken advantage of users being clueless, doesn't mean those clueless people don't care about privacy.

Second, your "nobody knows about it" argument can cut the other way. How can a business track people when most people don't know/care that they can opt out of being tracked?

Nobody wants to mention it, but the truth is that if it were on by default, few people would turn off DNT once they knew what it was for.

I don't like MS, and I don't even own a computer that can run IE10, but I think this is a great idea.

ktsmith3• 14 years ago

I spent several years working for a marketing firm and based on my experience with the industry I would guess that there will be no adoption of honoring these tags if they are sent by default unless it becomes legally mandated.

lomegor2• 14 years ago

If you say everybody cares about privacy you should back that up (unless you are using privacy in the general term and not for this specific example). I, for one, do not care about site tracking; in fact, I would gladly opt in to any such service if I see it fit. And I know a lot of people who also do not care about tracking.

chc2• 14 years ago

> First, everybody cares about privacy.

This is true, but it's also a very broad statement that does not entail that many people care about the Do Not Track header. Everybody has a different level of privacy that they care about. Most people care if you watch them in their bedrooms or bathrooms. Some people care if you know how much money they have. A smaller number of people care if you see their bare skin and thus wear burqas when they go out in public. An even smaller number of people care if ad networks compile a profile of things that are interesting to them.

The problem is that "Do Not Track" is supposed to indicate intent. If the browser vendor indicates intent in one direction when the user hasn't indicated intent in either direction, advertisers can no longer trust what the browser tells them. It's like the boy who cried wolf.

powertower• 14 years ago

If you ask 10 people whether they want websites to track them, and 9 say no, why shouldn't this be default behavior?

UnFleshedOne• 14 years ago

"How can businesses determine which users are OK with being tracked, and which are not?"

Easy: we need a new header: RDNT, Really Do Not Track. This would be off by default and power users can turn it on indicating an explicit intention.

eli• 14 years ago

Seems like a terrible idea. I think the vast majority of online marketing companies are very willing to let people opt-out of tracking [1], but people who haven't expressed a preference? If DNT header becomes the default for browsers then I predict ignoring DNT will become the default for ad networks.

[1] http://www.networkadvertising.org/managing/opt_out.asp

cooldeal3• 14 years ago

In that case I hope someone makes an extension that blocks ads from such networks by default.

simonbrown2• 14 years ago

How many people will install it that haven't installed Adblock Plus?

magicalist2• 14 years ago

Mozilla's reaction: http://blog.mozilla.org/privacy/2012/05/31/do-not-track-its-...

"There are three different signals to consider in broadcasting the user’s preferences for tracking:

  User says they accept tracking
  User says they reject tracking
  User hasn’t chosen anything

Firefox defaults to state 3: we don’t know what the user wants, so we’re not sending any signals to servers. This causes the presence of the signal to mean more — the signal being sent should be the user’s choice, not ours. Therefore, Firefox doesn’t broadcast anything until our user has told us what to send."

magicalist2• 14 years ago

also, from this Microsoft's post:

"At the moment there is not yet an agreed definition of how to respond to a DNT signal, and we know that a uniform, industry-wide response will be the best way to provide a consistent consumer experience across the Web.... Microsoft does not yet respond to the DNT signal, but we are actively working with other advertising industry leaders on what an implementation plan for DNT might look like, with a goal of announcing more details about our plans in the coming months."

Brilliant, guys. I'm really excited that you're fully embracing something you have no clue how it's actually going to work. Instead of giving yourself an out, why not just commit to an aggressive interpretation of "do not track" on the server side as well?

(to be fair, when you wait two years between browser releases, you do have to try to aim where the market is moving towards, rather than where it is)

recoiledsnake2• 14 years ago

>we don’t know what the user wants

How about they ask their users on first install?

cooldeal3• 14 years ago

Unlikely to happen, since all their revenue of more than hundred million dollars a year comes from Google, which stands to lose big if that feature is implemented.

Opera and Chrome stand to lose too, so that won't happen there. Bing's revenues(and MSN.com etc.) also stand to lose with it, but looks like MS is okay with it.

The only exception with no stake in all this is Apple, which has already implemented third party cookie blocking in iPhone Safari(and Google got some heat for circumventing it).

Edit: On further thought, Apple does get a cut from Google being the default search, but it's probably such a miniscule part of their revenues that they can easily forgo in the name of doing the right thing for their users.

simonbrown2• 14 years ago

So everyone clicks "no" (or gets confused and asks a technical relative), Firefox always sends the DNT header, so no sites respect it.

lmkg• 14 years ago

I'm not normally one for tinfoil-hat theories... but given that "online advertising" is basically synonymous with Google, how does this decision impact Google?

lasr21• 14 years ago

From: http://daringfireball.net/linked/2012/06/01/opt-in-opt-out

"If “Do Not Track” defaults to on, most users will have it on; if it defaults to off, most users will have it off. Defaulting to off is no more a representation of “the user’s voice” than defaulting to on is."

kevinpet• 14 years ago

The header isn't called "tracking permission", it's "Do Not Track", an explicit negative. Genius move on MS part though. By making DNT too detrimental for advertisers to implement, they ensure no one will implement it, which means they will also be able to ignore it.

Animus7• 14 years ago

Indeed. I seriously think this is a sly attempt at crippling DNT and boosting ad revenues (also, remember: Microsoft owns a significant stake in Facebook, whose "Like" beacons would be adversely affected by legislation regulating DNT).

As a bonus, they get to look like a modern, privacy-conscious, I've-got-your-back company while they're at it. From a business perspective, it's really smart.

Disclaimer: Used to work for Microsoft, though nothing web-related.

limejuice• 14 years ago

If IE10 installer asked you this question: Do you want websites to track you? () Yes () No I think most people would say No. So, defaulting to No seems like the correct thing to do.

I don't know if that would really hurt Google or Facebook because if you have a google account, you are opted-in to have google or facebook track you.

It might hurt 'lurker' ad networks which track you without you even having any account or relationship with them.

corin_• 14 years ago

A huge amount of Google's advertising is based on anonymous (not linked to your Google account) profiles they build of people, which they can't do if DNT is set.

raldi• 14 years ago

And if waiters asked restaurant patrons if they wanted dihydrogen monoxide used in the cooking of their food, most people would say no. That doesn't mean we should stop cooking with water.

jordo37• 14 years ago

This seems like an unfortunate case of Microsoft looking to what will be the standard several years from now - a good thing for most web technology, given their slow browser development speed. However, due to the politics and industry regulation that is still being decided, this will actually sway the direction of DNT and make it useless (as many users have pointed out here). There are two fundamental things to keep in mind:

1) There will always be ads on the internet. We are not moving to a direct pay internet economy anytime soon. 2) Behavior targeting is significantly more effective than other types of targeting including the context based approach heavily favored by privacy advocates. (See http://idaconcpts.com/2011/04/13/behavioral-targeting-double...). Because of this, the advertising companies will find ways to keep doing behavior targetting - ranging from the benign like site retargetting to the more troubling association with private data.

DNT as an opt out solution is great because it allows people who probably won't click on ads to say they don't want them. Private users and advertising companies both win. But third party cookies exist for a reason and if they are removed from the equation then advertising companies will simply find another way.

IE10 to send "Do Not Track" DNT header by default

Related Stories