How does google-analytics guarantees that the tracking record is coming from the real site

Posted by tuler on Stack Overflow See other posts from Stack Overflow or by tuler
Published on 2010-04-22T10:51:01Z Indexed on 2010/04/22 10:53 UTC
Read the original article Hit count: 213

When you sign up to google analytics it instructs you to use a javascript snippet on every page you want to track. This code includes an API key, which is visible to everyone who views your source code.

How does it guarantees that the request is coming from the real site, and not from a third-party who wants to mess with your statistics? Does it check the HTTP Referer header? Even that is not safe, as it can be forged.

© Stack Overflow or respective owner

Related posts about google-analytics

Related posts about google-analytics-api