If I sha256 hash your IP on my site to identify you, does that count as tracking your IP? 🤔
Discussion
If you can unhash it, yes.
Though you make the assumption its my IP that I use.
Of course 😅
Do I get to set a password and salt? I trust you are a good actor but I’d rather whatever is developed doesn’t require trust in the host or a third party to not have a rainbow table for IP addresses.
This would be for unauthenticated users trying to brute force sign ups or logins, once you're logged in I identify you with the email you used.
You can match different usages accross time so yes
Great point. A hash might be an otherwise indecipherable string but if it’s constant it’s an identifier nevertheless.
Yes, because you can receive an order from the state to provide everything you have about a given IP. You can hash the requested IP to find somebody's past actions and deliver it.
I need to do rate limiting, I don't see anyway around this. But since I only cache it for one minute at a time I'll only ever have max 1 minute of data to potentially leak
