{"id":56195,"date":"2020-02-07T00:00:00","date_gmt":"2020-02-06T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/zagolovok-x-client-data-kak-metod-identifikatsii-polzovatelej-chrome"},"modified":"2020-02-18T14:04:25","modified_gmt":"2020-02-18T11:04:25","slug":"zagolovok-x-client-data-kak-metod-identifikatsii-polzovatelej-chrome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/zagolovok-x-client-data-kak-metod-identifikatsii-polzovatelej-chrome","title":{"rendered":"Z\u00e1hlav\u00ed X-Client-Data jako metoda identifikace u\u017eivatel\u016f Chrome","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

P\u0159i diskusi iniciativy<\/a><\/noindex> Google o unifikaci obsahu HTTP hlavi\u010dky User-Agent, v\u00fdvoj\u00e1\u0159 prohl\u00ed\u017ee\u010de Kiwi si v\u0161iml<\/a><\/noindex> na zb\u00fdvaj\u00edc\u00ed hlavi\u010dku HTTP v Chromu \u201eX-Client-Data\u201c, kter\u00e1 je potenci\u00e1ln\u011b naru\u0161uje<\/a><\/noindex> podl\u00e9h\u00e1 obecn\u00e9mu na\u0159\u00edzen\u00ed o ochran\u011b osobn\u00edch \u00fadaj\u016f v Evropsk\u00e9 unii (GDPR<\/a><\/noindex>). B\u011bhem diskuze<\/a><\/noindex> tak\u00e9 byla kritizov\u00e1na dvoj\u00ed politika spole\u010dnosti Google, kter\u00e1 na jedn\u00e9 stran\u011b podporuje<\/a><\/noindex> metody<\/a><\/noindex> blokov\u00e1n\u00ed skryt\u00e9 identifikace a sledov\u00e1n\u00ed \u010dinnost\u00ed u\u017eivatel\u016f, ale na druh\u00e9 stran\u011b nesp\u011bch\u00e1 k odstran\u011bn\u00ed podpory hlavi\u010dky X-Client-Data z Chrome, kter\u00e1 m\u016f\u017ee b\u00fdt pou\u017eita k identifikaci instanc\u00ed prohl\u00ed\u017ee\u010de p\u0159i p\u0159\u00edstupu k slu\u017eb\u00e1m Google.<\/p>\n

Hlavi\u010dka X-Client-Data nen\u00ed skrytou funkcionalitou a jej\u00ed chov\u00e1n\u00ed je pops\u00e1no<\/a><\/noindex> v dokumentaci. P\u0159es X-Client-Data spole\u010dnost Google z\u00edsk\u00e1v\u00e1 \u00fadaje o aktivit\u00e1ch ur\u010dit\u00fdch experiment\u00e1ln\u00edch mo\u017enost\u00ed v Chrome v n\u00e1vaznosti na sv\u00e9 weby (nap\u0159\u00edklad b\u011bhem experimentu m\u016f\u017ee Google aktivovat na YouTube ur\u010dit\u00e9 testovac\u00ed mo\u017enosti, pokud jsou podporov\u00e1ny prohl\u00ed\u017ee\u010dem, nebo se pokusit porovnat vznikl\u00e9 probl\u00e9my s aktivac\u00ed experiment\u00e1ln\u00edch funkc\u00ed). <\/p>\n

Nadpis je odes\u00edl\u00e1na<\/a><\/noindex> pouze pro po\u017eadavky na weby Google odpov\u00eddaj\u00edc\u00ed vzor\u016fm \u201e*.doubleclick.net\u201c, \u201e*.googlesyndication.com\u201c, \u201ewww.googleadservices.com\u201c, \u201e*.google.<TLD<\/a><\/noindex>>\u201c a \u201e*.youtube.\u201c, a odes\u00edlan\u00e9 p\u0159es HTTPS. V re\u017eimu inkognito se hlavi\u010dka nevypl\u0148uje, ale v p\u0159\u00edpad\u011b zm\u011bny autentizovan\u00e9ho u\u017eivatelsk\u00e9ho profilu Google na hostuj\u00edc\u00ed profil nebo p\u0159i vyvol\u00e1n\u00ed operace \u010di\u0161t\u011bn\u00ed dat se hlavi\u010dka neresetuje a pokra\u010duje v odes\u00edl\u00e1n\u00ed s p\u0159edchoz\u00ed hodnotou.<\/p>\n

\"Z\u00e1hlav\u00ed<\/a><\/noindex><\/center><\/p>\n

Bylo uvedeno, \u017ee hlavi\u010dka neobsahuje osobn\u011b identifikovateln\u00e9 informace, ale pouze popisuje stav instalace Chrome a aktivn\u00ed experiment\u00e1ln\u00ed funkce. Pokud je v nastaven\u00ed zak\u00e1z\u00e1no odes\u00edl\u00e1n\u00ed telemetrie o pou\u017e\u00edv\u00e1n\u00ed prohl\u00ed\u017ee\u010de a generov\u00e1n\u00ed zpr\u00e1v o p\u00e1dech, p\u0159i generov\u00e1n\u00ed v\u00fdchoz\u00ed hodnoty hlavi\u010dky X-Client-Data se pou\u017e\u00edv\u00e1 pouze 13 bit\u016f entropie (8000 r\u016fzn\u00fdch kombinac\u00ed), co\u017e nesta\u010d\u00ed k identifikaci. <\/p>\n

Vzhledem k tomu, \u017ee v z\u00e1hlav\u00ed jsou k\u00f3dov\u00e1ny tak\u00e9 n\u011bkter\u00e9 nastaven\u00ed a parametry syst\u00e9mu, je obsah X-Client-Data v kone\u010dn\u00e9m d\u016fsledku vhodn\u00fdm dodate\u010dn\u00fdm datov\u00fdm zdrojem pro nep\u0159\u00edmou identifikaci u\u017eivatele na kr\u00e1tkou dobu (experiment\u00e1ln\u00ed funkce se \u010dasem zap\u00ednaj\u00ed a vyp\u00ednaj\u00ed, co\u017e vede k ob\u010dasn\u00e9 zm\u011bn\u011b hodnoty v X-Client-Data). <\/p>\n

Nicm\u00e9n\u011b krom\u011b po\u010d\u00e1te\u010dn\u00ed entropie p\u0159i vytv\u00e1\u0159en\u00ed hodnoty X-Client-Data se tak\u00e9 pou\u017e\u00edv\u00e1 seed-sekvence vr\u00e1cen\u00e1 servery Google, kter\u00e1 z\u00e1vis\u00ed na zemi, IP adrese a dal\u0161\u00edch krit\u00e9ri\u00edch, kter\u00e1 Google pova\u017euje za d\u016fle\u017eit\u00e1 (nap\u0159\u00edklad nic nebr\u00e1n\u00ed vr\u00e1tit velkou n\u00e1hodnou sekvenci, kter\u00e1 se stane p\u0159esn\u00fdm identifik\u00e1torem).
\nKrom\u011b toho kontrola podle vzor\u016f dom\u00e9n Google p\u0159i odes\u00edl\u00e1n\u00ed X-Client-Data nevylu\u010duje situace, kdy m\u016f\u017ee \u00fato\u010dn\u00edk zaregistrovat dom\u00e9nu ve tvaru \u201eyoutube.xn--55qx5d\u201c a za\u010d\u00edt sb\u00edrat identifik\u00e1tory.<\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0438 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b Google \u043f\u043e \u0443\u043d\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 User-Agent, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Kiwi \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043e\u0441\u0442\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0432 Chrome HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a «X-Client-Data», \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043d\u0430\u0440\u0443\u0448\u0430\u0435\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u0432 \u0415\u0432\u0440\u043e\u0441\u043e\u044e\u0437\u0435 \u043e\u0431\u0449\u0438\u0439 \u0440\u0435\u0433\u043b\u0430\u043c\u0435\u043d\u0442 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 (GDPR). \u0412 \u0445\u043e\u0434\u0435 \u0434\u0438\u0441\u043a\u0443\u0441\u0441\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0430\u0441\u044c \u043a\u0440\u0438\u0442\u0438\u043a\u0435 \u0434\u0432\u043e\u0439\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441 \u043e\u0434\u043d\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043f\u0440\u043e\u0434\u0432\u0438\u0433\u0430\u0435\u0442 \u043c\u0435\u0442\u043e\u0434\u044b \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":56196,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-56195","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hlava X-Client-Data jako metoda identifikace u\u017eivatel\u016f Chrome | ProHoster","description":"P\u0159i diskusi o iniciativ\u011b Google na unifikaci obsahu HTTP hlavi\u010dky User-Agent, v\u00fdvoj\u00e1\u0159 prohl\u00ed\u017ee\u010de Kiwi.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/zagolovok-x-client-data-kak-metod-identifikatsii-polzovatelej-chrome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a X-Client-Data \u043a\u0430\u043a \u043c\u0435\u0442\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Chrome | ProHoster","og:description":"\u041f\u0440\u0438 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b Google \u043f\u043e \u0443\u043d\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 User-Agent, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Kiwi.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/zagolovok-x-client-data-kak-metod-identifikatsii-polzovatelej-chrome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-06T21:00:00+00:00","article:modified_time":"2020-02-18T11:04:25+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"56195","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:29:18","updated":"2022-10-10 00:15:42","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/56195","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=56195"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/56195\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/56196"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=56195"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=56195"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=56195"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}