Live data from Hacker News

Anatomy of Google analytics cookies

devblog.eduhub.nl

1–7 of 7 posts

Re: Anatomy of Google analytics cookies

#4

Just wondering: Why doesn't a webserver encrypt the cookie value with a server-side key? This way, the information in the cookie (timestamps, pageviews, number of sessions etc.) can be safe from wireshark sniffers.

That would have to be done on Google's end, that is not something webmasters using Google Analytics are able to do by themselves.

Re: Anatomy of Google analytics cookies

#5
Since Google is so keen on improving the speed of the internet (and good for them for that) I'm looking forward to the day when they'll only use one cookie for all their tracking (if that's even possible). GA is, by Google's standards, a speed hog right now, and Page speed always complains about it ...

Re: Anatomy of Google analytics cookies

#6
post #4

Just wondering: Why doesn't a webserver encrypt the cookie value with a server-side key? This way, the information in the cookie (timestamps, pageviews, number of sessions etc.) can be safe from wireshark sniffers.

That would have to be done on Google's end, that is not something webmasters using Google Analytics are able to do by themselves.

Yep. I'm wondering why Google, in this case, wouldn't encrypt the value stored in its cookie. Is there any technical reason other than laziness?

Re: Anatomy of Google analytics cookies

#7
post #4

Earlier quoted context omitted.

That would have to be done on Google's end, that is not something webmasters using Google Analytics are able to do by themselves.

Yep. I'm wondering why Google, in this case, wouldn't encrypt the value stored in its cookie. Is there any technical reason other than laziness?

I believe the cookies are set and manipulated by JavaScript, as such I'm not even sure it would be a good idea...