3 ms·

Except they know you've accessed it previously. Its a different threat model that leaves room for a little more agency to be given to the user.

• malfist 3y ago
  I think if they can't access the server for authentication, it's likely they can't retrieve history either. Or know which user to pull history for
  • darkwater 3y ago
    Cookies? When you are not authenticated, it's still a 1st party.