Re: [hackers]

From: Hiltjo Posthuma <hiltjo_AT_codemadness.org>
Date: Sun, 18 Nov 2018 21:39:51 +0100

On Sun, Nov 18, 2018 at 07:47:00PM +0100, Quentin Rameau wrote:
> Hello nzl,
>
> > Subject: [surf[PATCH] Remove HTTP referer on navigation
>
> Thank you, but I'm not sure what you want us to do with that.
>
> Is this for mainline integration?
> If so, I find it a bit too drastic, some websites don't work without
> the correct referer (mostly with session).
>
> This could be a config option though, then people could be able to
> set it on a per-website basis.
>

Hi,

Some browsers have different "privacy" options like:

1. Strip the referer header entirely.
2. Only allow it for the same origin domains.
3. Allow "crossdomain" referer, but only set the domain part.

Of course you can also strip the Referer using a filtering proxy and not do
this in the browser itself.

Just my 0.69 cents.

-- 
Kind regards,
Hiltjo
Received on Sun Nov 18 2018 - 21:39:51 CET

This archive was generated by hypermail 2.3.0 : Sun Nov 18 2018 - 21:48:22 CET