- <p>Verizon, una de las principales compañías de telefonía móvil en los Estados Unidos, agrega un encabezado de rastreo único a todo el tráfico HTTP sin cifrar en su red.
- La EFF (Fundación de Frontera Electrónica) ha escrito sobre las <a href="https://www.eff.org/deeplinks/2014/11/verizon-x-uidh">implicaciones de privacidad de esta práctica</a>.
- Debido a la presión pública Verizon ha creado una manera de <a href="http://www.clark.com/how-opt-out-verizons-super-cookie-tracking">optar por evitar este rastreo</a>.</p>
+ <p>Google programmed Android’s WebView to send an X-Requested-With header with every request.
+ The value of the X-Requested-With header is set to the application ID, which in the case of Privacy Browser is <code>com.stoutner.privacybrowser.standard</code>.
+ Currently, it isn't possible to remove this header, but the value can be changed. By default, Privacy Browser sends a null (empty) value for the X-Requested-With header.
+ Even though the spec allows for null header values, some web servers don't like them, so Privacy Browser has the option to revert to the default behavior of sending the app ID.
+ Because this setting is cached when a URL is first loaded, and isn't changed when reloading a page or navigating history,
+ changes to this setting may not be applied until Privacy Browser is restarted.
+ There is a <a href="https://www.stoutner.com/the-x-requested-with-header/">blog post</a> with additional information.
+ The X-Requested-With header will be <a href="https://redmine.stoutner.com/issues/37">completely removed</a> in the 4.x series with the release of Privacy WebView.</p>