3 ms·
When going from https to https site, referer information is usually being sent, at least with modern browsers. So if the whole web goes encrypted (yay), the iss
by wladimir 15y ago
When going from https to https site, referer information is usually being sent, at least with modern browsers. So if the whole web goes encrypted (yay), the issue is solved.
- harryh 15y agoReally? That's....very strange. The rules for this sort of thing seem so arbitrary.
- wladimir 15y agoIt makes a little bit of sense. When you come from a https site, you don't want to leak referrer (and thus which part of which site you were visiting) over the unencrypted internet. Though in my eyes sending referrers always has been questionable "insecure by default" behavior, as the internal structure of one site is leaked to another. With hindsight, maybe it should have been restricted to the domain name.