4 ms·
Plenty of sites use URLs like http://example.com/sd8n9g9g http://example.com/sd8n9g9g rather than require logins for private / semi-private material. What's wro
by masomenos 16y ago
Plenty of sites use URLs like http://example.com/sd8n9g9g http://example.com/sd8n9g9g rather than require logins for private / semi-private material. What's wrong with that?
- nl 16y agoIt's a pretty bad practice. I guess for semi-private material it's okay, but otherwise that's liable to leak. The biggest hole in it is referrers leaking to other sites, but I can think of other methods (eg probing the CSS history exposure bug).