I was moderately appalled to discover just now that Referer: headers are included in cross-domain HTTPS requests. Bang goes using a CDN to lighten the load on t

I was moderately appalled to discover just now that Referer: headers are included in cross-domain HTTPS requests. Bang goes using a CDN to lighten the load on the secure areas of my server. (Mozilla fixed the 'bug' that prevented this behaviour a long while ago: https://bugzilla.mozilla.org/show_bug.cgi?id=141641 https://bugzilla.mozilla.org/show_bug.cgi?id=141641)