3 ms·
We should make this opt-in, by emitting the header by default in Apache and nginx and requiring special configuration to remove the header.
by sanxiyn 6y ago
We should make this opt-in, by emitting the header by default in Apache and nginx and requiring special configuration to remove the header.
- thinkingemote 6y agoAlso, to standard GO, Ruby/Rails, php, JS net libraries.
- ognarb 6y agoYeah that should be the default configuration shipped with Apache httpd. If apache is refuse to add the header, I'm sure it will be possible to convince many distros to add it
- account42 6y agoNo, we should absolutely not bloat every HTTP response just because Google wants to abuse its users. Not to mention that widespread use of this header will result in it being ignored entirely just like happened to DNT. The proper reponse is to a) convince people to stop using Chrome and other Google software and b) campaign for legislation and antitrust enforcement and c) remove google ads, analytics and any other Google scripts from your websites.