Browser blocks Digicert Seal script as cross site tracker

Browser Support Desktop Support
#1

The following is copied from the Shield popup icon in the header:

www.devotea.com
1 Cross-site trackers blocked

To reproduce: go to:
https://www.devotea.com
Seal should appear at the bottom left of the page in the footer. If it is blank:
Click the “Brave” icon in the header bar. Should see 1 tracker blocked.
Click on the “/ 1” to see the results pasted above.

Expected result:
The Digicert seal must be displayed!

Brave Version( Version 1.22.72 Chromium: 89.0.4389.128 (Official Build) (64-bit)

Additional Information:
Haven’t tested it on mobile or tablets, but expect the results would be the same.
If this affects all Digicert users, its a big problem!

#2

Correct, they are blocked. Blocking a few “Seals” which harbor trackers.

https://seal.digicert.com/seals/cascade/seal.min.js cleaned up: https://pastebin.com/raw/MHPt57J7

fingerprinting, user agent checks, mouse checks.

It’s not just digicert, other certs are also covered.

The less third-party scripts being loaded the better, the better for privacy.

#3

Thank you.

Are you saying that the script at pastebin.com should replace the script from Digicert?

Also, regarding the value of loading fewer third party scripts, I agree until that goal starts removing important customer valued function, like being able to verify how the website is secured and by what source.

#4

Has anyone used this and gotten it to work (that is display the seal)?
Trying it on a page with Brave, I just get a compile error. unexpected (tag?) “default”.
jshint returns a list of warnings and undefined variables. After addressing the errors(not the warnings) the script appears to run, but does nothing. There are no instructions for use , of course.

A little more help please?

#5

Are you saying that the script at pastebin.com should replace the script from Digicert?

No, the pastbin link was the Digicert javascript cleaned up. Showing the tracking bits.

Also, regarding the value of loading fewer third party scripts, I agree until that goal starts removing important customer valued function, like being able to verify how the website is secured and by what source.

Maybe they (Digicert and others) should just use a standard image/link, and no javascripts attached.

Not showing the Digicert seal, doesn’t prevent the user from browsing the website, logining in, purchasing or anything.

If you need the seal either allow it via brave://adblock or disable shields ads/trackers.

#6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.