zlacker

> The website will just know the request is coming from something which has a valid ID available. The state will also not know which pages you browsed, only the domain of the request, just like with HTTPs your ISP does not know exactly the pages you browse but just the websites themselves.

Just the domain is still a pretty major information leak.

> And before someone talks about the state knowing your browser history: they already can by calling up your ISP, and they would get a lot more information than this mechanism would provide.

Yeah, but they have to ask. This creates a system that requires preemptively sending them that information.