4 ms·
From the article: > HTTPS websites will send referrers to any other HTTPS website even if it contains sensitive information As such, having a website which is
by Smerity 11y ago
From the article:
> HTTPS websites will send referrers to any other HTTPS website even if it contains sensitive information
As such, having a website which is HTTPS will get you referers from both HTTP and HTTPS if they're willing to send them, but it's also important to know you can control them in case there are privacy implications such as leaking your customer's information to external HTTPS sites.
- sopooneo 11y agoThank you for this, because I think I'm about to learn from you, but I'm confused. How can you control them? Is there some way for a site to signal to a browser whether it should or send referrer headers and under what circumstances?
- deleted 11y ago[deleted]
- Smerity 11y agoThe site can signal, either via server headers or meta tags, whether to send or withhold referrers. Adding <meta name="referrer" content="never"> will prevent referrers from being sent, whilst <meta name="referrer" content="always"> will ensure they're sent whether linking to HTTP or HTTPS. The user can of course override these if so desired - see the extensions linked to by many other commenters.