Open dharb opened 5 years ago
gorhill
commented
5 years ago Every single hostname added to the content script need to undergo testing:
I can't blindly add sites in there.
gorhill
commented
5 years ago A first step would be to list the sites which are in there but not in uBO-Extra. The volunteers can start to check these sites one by one to validate that they need to be foiled by uBO-Extra.
dharb
commented
5 years ago Makes sense, I appreciate your level of thoroughness. I'll go ahead and diff the lists and post the results here as soon as I get a few minutes to spare.
As a side note, I just wanted to say thank you for all that you do, and for not selling out. It's inspiring.
smed79
commented
5 years ago 
okiehsch
commented
5 years ago Well, I tried all domains beginning with "a" and could not reproduce any redirections.
I can see instart code in some sources for example autonation.com but it does not trigger a redirection on my end.
Hey there,
I recently came across a much larger list of domains that use instart logic. It turns out that instart logic owns an SSL cert that contains a long list of the domains where it can be found in the 'Subject Alternative Names' field, which you can see here: https://crt.sh/?id=361958495&opt=ocsp. I think there might be more to this evil tracker company having an SSL cert for these domains (is this a new form of server-side tracking that is unbeatable by client software?), but at the very least I would like to do whatever I can to limit their reach.
Would you like me to make a PR to update the readme and the array of domains where the instart logic buster should be activated?