News for hackers. Stuff that matters.

A comment on How to leak to the press. Parent comment

Re:How to leak to the press by olivierlacan on Friday January 27, 2017 @12:16PM (#13501049)
No, HTTPS URLs are not logged in plain text as they are in HTTP. So it does make an important difference.

See: http://security.stackexchange.com/a/2916/50175

[ Parent | on HN ]
Re:How to leak to the press by jvdh on Friday January 27, 2017 @12:25PM (#13501109)
If you mean "logging" as in web server logs, then it completely depends on the configuration of the server and there is nothing the client can do about it..

If you mean "transferring over the network", then yes, HTTPS only shows the server you are connecting to, but not the specific URL.

Then again, that can be deduced from the transfer sizes that are still shown.

[ Parent | on HN ]