Google aggressively championed HTTP/3 by pioneering QUIC in Chrome since 2013, this protocol promises faster web experiences by running over UDP, ditching TCP’s clunky handshakes for seamless connection migration. When you switch from Wi-Fi to mobile data, QUIC keeps your session alive using stable Connection IDs (CIDs), letting sites recognize you without interruptions.
This feature shines for video calls or gaming, but it opens doors for advertisers. CIDs persist across networks, enabling trackers to link your activity from home Wi-Fi to coffee shop hotspots, building detailed profiles without cookies. Privacy tools like ad blockers struggle since QUIC encrypts payloads, yet metadata like CID patterns and timing reveal user identities over time.
Network observers can fingerprint these flows on UDP port 443, correlating sessions despite IP changes. As QUIC adoption hits 30% globally, expect regulators to scrutinize this shadow tracking—time to rethink “privacy-first” browsing?