3 ms·
It can be subverted: make Firefox touch the “encrypted” URL to see what it links to, then serve the cleartext URL.
by SnowHill9902 4y ago
It can be subverted: make Firefox touch the “encrypted” URL to see what it links to, then serve the cleartext URL.
- jefftk 4y agoThat still gets them their cross-site analytics, since the encrypted URL is only accessed when you're visiting the page.
- askvictor 4y agoDepends on how many URLs on are on the page; if there are 20 (encrypted) urls, and the browser touches each of them, but the user only follows one of them, the data FB gets is much less useful.