Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It can be subverted: make Firefox touch the “encrypted” URL to see what it links to, then serve the cleartext URL.



That still gets them their cross-site analytics, since the encrypted URL is only accessed when you're visiting the page.


Depends on how many URLs on are on the page; if there are 20 (encrypted) urls, and the browser touches each of them, but the user only follows one of them, the data FB gets is much less useful.




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: