An interesting tidbit from Mozilla’s latest privacy release (https://www.ghacks.net/2023/11/21/firefox-120-ships-today-with-massive-privacy-improvements/):
The first introduces support for the Global Privacy Control in Settings. The privacy feature informs websites that you visit that you don’t want your data sold or shared. It is legally binding in some states in the United States, including in California and Colorado.
What’s to stop users from utilizing a VPN exit point in California or Colorado to force the binding nature of the request?
The post is about saying “No, I do not want to be fingerprinted”, not “Here are my faked attributes that change every time I visit you”. What’s the point of sending a DNT header if companies don’t care and just do what they do?