3 ms·
How are HN comments an issue? All comments are public, so what's the concern? Keeping information in URLs is fine as long as it has enough entropy to be unbrut
by ikeboy 10y ago
How are HN comments an issue? All comments are public, so what's the concern?
Keeping information in URLs is fine as long as it has enough entropy to be unbruteforcable. Bit.ly and t.co don't, and so aren't secure.
- starquake 10y agoThat's exactly my point. Because some users don't understand this technical issue, you shouldn't use personally identifiable information in URLs. They might post it to services with enough entropy. But they also might post it to public parts of the internet. I use HN comments as an example of an unsafe way to share URLs with personally identifiable information.