4 ms·
> URLs for example should be hashed before going out. That doesn't help at all. If the server has a database it's going to match this hash too, then it knows
by admax88q 10y ago
> URLs for example should be hashed before going out.
That doesn't help at all. If the server has a database it's going to match this hash too, then it knows what URL corresponds to the hash.
- onli 10y agoIt prevents the server form matching the url when it has stuff like the session id and username in it, and also helps in not giving those information to the outside.
- r721 10y agoYeah, Google Safe Browsing ships a local database of urls to prevent this: https://developers.google.com/safe-browsing/v4/update-api https://developers.google.com/safe-browsing/v4/update-api