Measuring Cookies and Web Privacy in a Post-GDPR World

In response, the European Union has adopted the General Data Protection Regulation (GDPR), a legislative framework for data protection empowering individuals to control their data. Since its adoption on May 25th, 2018, its real-world implications are still not fully understood. An often mentioned aspect is Internet browser cookies, used for authentication and session management but also for user tracking and advertisement targeting.

[1]  Kassem Fawaz,et al.  The Privacy Policy Landscape After the GDPR , 2018, Proc. Priv. Enhancing Technol..

[2]  Edward W. Felten,et al.  Cookies That Give You Away: The Surveillance Implications of Web Tracking , 2015, WWW.

[3]  Edgar R. Weippl,et al.  Browser History Stealing with Captive Wi-Fi Portals , 2016, 2016 IEEE Security and Privacy Workshops (SPW).

[4]  David Plonka,et al.  kIP: a Measured Approach to IPv6 Address Anonymization , 2017, ArXiv.

[5]  Roy T. Fielding,et al.  Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing , 2014, RFC.

[6]  Edgar R. Weippl,et al.  Block Me If You Can: A Large-Scale Study of Tracker-Blocking Tools , 2017, 2017 IEEE European Symposium on Security and Privacy (EuroS&P).

[7]  Arvind Narayanan,et al.  Online Tracking: A 1-million-site Measurement and Analysis , 2016, CCS.

[8]  Brian Trammell,et al.  Revisiting the Privacy Implications of Two-Way Internet Latency Data , 2018, PAM.

[9]  Narseo Vallina-Rodriguez,et al.  A Long Way to the Top: Significance, Structure, and Stability of Internet Top Lists , 2018, Internet Measurement Conference.

[10]  Paul Barford,et al.  An Empirical Study of Web Cookies , 2016, WWW.

[11]  Tadayoshi Kohno,et al.  Internet Jones and the Raiders of the Lost Trackers: An Archaeological Study of Web Tracking from 1996 to 2016 , 2016, USENIX Security Symposium.

[12]  Lili Jiang,et al.  The cookie recipe: Untangling the use of cookies in the wild , 2017, 2017 Network Traffic Measurement and Analysis Conference (TMA).

[13]  Nikolaos Laoutaris,et al.  Tracing Cross Border Web Tracking , 2018, Internet Measurement Conference.

[14]  Thorsten Holz,et al.  We Value Your Privacy ... Now Take Some Cookies: Measuring the GDPR's Impact on Web Privacy , 2019, NDSS.

[15]  Melanie Volkamer,et al.  "This Website Uses Cookies": Users' Perceptions and Reactions to the Cookie Disclaimer , 2018 .

[16]  Angelos D. Keromytis,et al.  The Cracked Cookie Jar: HTTP Cookie Hijacking and the Exposure of Private Information , 2016, 2016 IEEE Symposium on Security and Privacy (SP).

[17]  Wouter Joosen,et al.  Rigging Research Results by Manipulating Top Websites Rankings , 2018, ArXiv.

[18]  David Lazer,et al.  Measuring Price Discrimination and Steering on E-commerce Web Sites , 2014, Internet Measurement Conference.

[19]  Adam Barth,et al.  HTTP State Management Mechanism , 2011, RFC.