Login.gov adds 20-year browser identifier, raising privacy questions
What happened
On October 2, a privacy analysis of America.gov on the Hacker News front page said that although America.gov promises privacy protection, the Login.gov it is required to use has added a browser identifier valid for 20 years, raising questions about tracking and data retention. The identifier, nds_experiment_uuid, can be generated before a user logs in and is attached to analytics events; it stays even after a user opts out of the NDS interface experiment. The report raises privacy concerns but does not say whether the identifier has been used for cross-site tracking.
Written by AI from the coverage · updated 2 hours ago
Coverage
Follow the reports to see the story from different sides.
- Hacker News front pageA 20-year-long permanent cookie: America.gov and tracking
America.gov 承诺保护隐私，但其被要求接入的 Login.gov 已加入有效期为 20 年的浏览器标识，引出追踪与数据留存疑问。Login.gov 的 nds_experiment_uuid 可在登录前生成并附加到分析事件，用户退出 NDS 界面实验后该标识仍保留。
Heat over time
Not enough continuous observations to draw a trend yet.