I believe Verizon was caught inserting super-cookies with an ad tracking identifier. But that method was much easier back when the majority of the web was just http.