3 ms·
Browsers strip Referer if the protocol is HTTP but the referrer's URL was HTTPS, to prevent the information about the resource just being left leak. If WSJ che
by senko 15y ago
Browsers strip Referer if the protocol is HTTP but the referrer's URL was HTTPS, to prevent the information about the resource just being left leak.
If WSJ checks Referer and explicitly allows Google to pass, it won't see it if you're coming from HTTPS.
- 0x0 15y agoOnly if the link target is non-HTTPS, I believe. HTTPS-to-HTTPS requests includes referer headers, even across domains.