Comment by nonane

Can you please explain why a third party browser can’t lie about its hash, just like it can lie about it’s user agent?