> Only when a match is detected in the local database, FF sends the full hash of the URL to Google to double check Even that's not quite what it says, as I und

> Only when a match is detected in the local database, FF sends the full hash of the URL to Google to double check Even that's not quite what it says, as I understand things. When a partial-hash match is detected, FF asks Google for the list of full hashes that start with this partial hash, and then checks (still locally) against those. So as far as I can see, Google still wouldn't know which of those full hashes corresponds to the URL you're requesting. (I have not examined the implementation personally, I'm just basing this off the post mentioned. But FF is open source, so if someone would like to check whether this is accurate, that'd be great.)