Consider alternative methods of solving the supposed problem - for example laws

[jwrosewell]

Transferred from #214.

Consider the X-Client-Data example. Chrome transmits to a whitelist of Google owned domains an HTTP header named X-Client-Data. This is described by Google here. The value could be used for identification purposes when combined with other available values. Therefore theoretical harm exists. This theoretical harm has been addressed by Google using a document that describes how the information is used.

The same principles exist elsewhere. A web site operator must in their privacy policy describe any identifiers, including probabilistic identifiers (aka fingerprints). Theoretical harm is similarly addressed. The proposal has so far made no attempt to consider similar remedies that involve professions other than engineering, such as the law. This issue provides an opportunity to address that with evidence and a clear explanation as to why other remedies do not apply in this situation.

This issue is different to #215 which relates to providing evidence for the existence of the problem seeking to be solved beyond the theoretical.