draft requirements for fingerprinting surface (active/passive)
requirements for local state/cookie-like fingerprinting; reference to Web Storage