指纹防护技术白皮书 - 海豚AI指纹浏览器文档

什么是浏览器指纹

网站不依赖 Cookie，也能读取浏览器暴露的软硬件特征，再组合成一个识别值。常见来源包括 User-Agent 与 Client Hints、屏幕与窗口尺寸、时区与语言、字体列表、Canvas 与 WebGL 的渲染结果、音频处理结果、WebRTC 暴露的网络地址，以及 CPU 核心数、内存、设备名等硬件信息。

海豚AI如何生成指纹

系统与浏览器身份：UA 与 Client Hints 按内核版本从素材库抽取，平台版本、架构和完整版本号相互一致。
图形与音频：WebGL 厂商与渲染器从显卡目录匹配。Canvas、WebGL 图像、AudioContext 与 ClientRects 使用每个环境独立的噪音种子。
网络：WebRTC 可以禁用、转发或替换为代理出口地址。时区、语言与地理位置可以跟随代理 IP。
硬件：CPU 核心数、设备内存、设备名称、MAC 地址与媒体设备数量按环境设置。
协议与端口：可以调整 TLS 加密套件，并限制网页扫描本机端口。

为什么要保持一致

指纹参数在创建环境时生成，并保存在这个环境上。下次打开，网站看到的仍是同一台设备。只有开启「每次启动随机部分指纹」时，相关参数才会变化。

隔离边界

每个环境使用独立的数据目录，Cookie、本地存储、IndexedDB 与历史记录各自保存。代理绑定在环境上，启动前可以先做连通性检查。

使用边界

指纹隔离用来把你有权管理的账号分开运行。请遵守目标平台规则，不要用它绕过网站的安全控制。

What a browser fingerprint is

Without cookies, a site can still read the software and hardware traits a browser exposes and combine them into an identifier. Common sources are the User-Agent and Client Hints, screen and window size, time zone and language, installed fonts, Canvas and WebGL rendering output, audio processing output, network addresses exposed through WebRTC, and hardware details such as CPU cores, memory, and device name.

How Dolphin AI generates it

System and browser identity: the UA and Client Hints come from the library by kernel version, with matching platform version, architecture, and full version.
Graphics and audio: the WebGL vendor and renderer come from the GPU catalog. Canvas, WebGL image, AudioContext, and ClientRects use a noise seed unique to each profile.
Network: WebRTC can be disabled, forwarded, or replaced with the proxy exit address. Time zone, language, and geolocation can follow the proxy IP.
Hardware: CPU cores, device memory, device name, MAC address, and media device counts are set per profile.
Protocols and ports: TLS cipher suites can be adjusted, and pages can be stopped from scanning local ports.

Why it stays consistent

Fingerprint values are generated when the profile is created and stored with it. The next time you open it, sites see the same device. Values change only when "randomize part of the fingerprint on each launch" is turned on.

Isolation boundary

Each profile has its own data folder, so cookies, local storage, IndexedDB, and history are stored separately. The proxy is bound to the profile, and you can check connectivity before launch.

Usage boundary

Fingerprint isolation keeps the accounts you are allowed to manage apart. Follow each platform's rules and do not use it to get around a site's security controls.

指纹防护技术白皮书Browser fingerprinting whitepaper