3 ms·
| As new URLs are added to sites that use that service they are submitted for archiving to the Wayback Machine. Yes, this would prevent most order-confirmation
by lgats 6y ago
| As new URLs are added to sites that use that service they are submitted for archiving to the Wayback Machine.
Yes, this would prevent most order-confirmation pages or otherwise private must-be-logged-in pages from being archived, but it will expose presumed-private URLs that are thought to be unique (tracking numbers, files uploaded with unique names, unique/private image urls that are otherwise publicly accessible)
If you've made efforts to your systems to prevent enumeration-attacks, this could partly bypass them.
- jlgaddis 6y agoWhat I'm hearing is "don't rely on security by obscurity", which I wholeheartedly agree with.