use id (NO USER ID !!) in user agent

[boudivv]

I write this from a web app developer's perspective with an open eye for privacy and security.

My proposal is to add a USE-ID to the user agent-string. So that would look like:

"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:121.0) Gecko/20100101 Firefox/121.0; F21620E7211DC308E7CEDAAB94405EB3"

How could this work: When updating and user signing in Firefox this Use-ID is created as an MD5 from the session-client-time and the Firefox user-id. In this way, there is no direct relation between the USE-ID and the user-id.

The advantage is that from the web-app perspective, we have a unique profile from the browser use-case. This offers the web app the ability to detect man in the middle cases easier and have a temporary session traceability up to the browser rather than only the session. All without compromising privacy.

[Jon]

Thanks for submitting an idea to the Mozilla Connect community! Your idea is now open to votes (aka kudos) and comments.