[opensource-dev] [POLICY] Configurable HTTP user-agent string

[Argent Stonecutter]

On 2010-05-05, at 18:39, Tigro Spottystripes wrote:
> How so?

The SL client is not a browser, and currently provides a stronger  
privacy firewall than a browser. This is important, because unlike a  
browser connection when you are logged in to SL you're broadcasting a  
strong non-repudiable identity token.

That is, if I visit Google Groups and then I visit the SL blog, there  
is no token carried between Google and the SL blog that is passed  out  
to the readers of Google Groups and the readers of the blog. When I  
visit Luskwood and whatever the newest version of Satyr or Woodbury  
turns out to be, my UUID goes with me. If I visit Luskwood as Argent  
Stonecutter, and Grieferzone as Obscure Nomdeplume, I don't want Loser  
Hax knowing they're the same person. I can turn off voice and media  
and keep them from getting any information that way, but if I start  
broadcasting stuff that carries any kind of detailed user-agent- or  
computer-specific info through LSL, that's bad.