News for hackers. Stuff that matters.
Re:Everyone who can now see your entire internet history, in... by dictum on Friday November 25, 2016 @07:35AM (#13036275)
Bad news for https://howtoopenanumberedaccount.com visitors (Host header in plaintext) and people who click on links to http://ponies.net from https://reddit.com/r/LaunderYourCash (Referer header in plaintext)
Re:Everyone who can now see your entire internet history, in... by bkor on Friday November 25, 2016 @08:23AM (#13036521)
AFAIK browsers will not provide a referrer if the previous page in case you go from https to http. Firefox has an option to disable https to https referer sharing btw.
Re:Everyone who can now see your entire internet history, in... by m0nty on Friday November 25, 2016 @08:20AM (#13036512)
Presumably the non-https assets which get pulled in when the main request is fulfilled could also act as a "fingerprint" of the page you are visiting?