Fair point. > I don't see how a url (over tls) exposes more information unless tls is MiTM'd. What is not sent cannot be hacked. I was not suggesting an expli

Fair point. > I don't see how a url (over tls) exposes more information unless tls is MiTM'd. What is not sent cannot be hacked. I was not suggesting an explicit security feature, rather a state of things. > That's a property of the url itself, and not unique to the hash-fragment, per se? Yes, but it makes for a nice combo with the previous point, as the URL now contains 2 things: the Locator itself that your peer and the server will access and (resp.) serve, plus the context that only your peer will have access to.