There are so many ways to coerce a GUID out of a browser: single pixel images, cache headers[1], etc. It's not feasible to implement disclosure control[2] retroactively in web standards.<p>1. <a href="http://sourcefrog.net/projects/meantime/" rel="nofollow">http://sourcefrog.net/projects/meantime/</a>
2. <a href="http://groups.csail.mit.edu/mac/classes/6.805/articles/privacy/sweeney-thesis-draft.pdf" rel="nofollow">http://groups.csail.mit.edu/mac/classes/6.805/articles/priva...</a>