Using TorBrowser, login with username and password on site.com (e.g., google, amazon, etc.), then ask TorBrowser for "New Tor circuit for this site." Why does site.com (sometimes) recognize this "new Tor circuit" as associated with the same username rather than a new, currently anonymous connection?
- I assume "New Tor circuit" request specifically forces new Tor exit node (new IP address).
- The url is generic (not site.com/username-abc123.html).
- JavaScript disabled.
- It seems that TorBrowser has allowed site.com to put cookie or other identifying feature on this browser session that persists across "New Tor circuit" request.
Is this expected behavior for "New Tor circuit for this site"?