What is browser fingerprinting and how should specification authors address it.