News for hackers. Stuff that matters.

A comment on DuckDuckGo Searches Are Not Anonymous. Parent comment

Re:DuckDuckGo Searches Are Not Anonymous by est on Thursday May 20, 2010 @05:34AM (#1363610)
> 1) Embed the images in iframes, which are then embedded in the page. The iframes will swallow the referrer, so provided they are hosted somewhere where logs are discarded then it should be fine (I'd want to cross-browser test this before relying on it though).

https will swallow referer automatically.

[ Parent | on HN ]
Re:DuckDuckGo Searches Are Not Anonymous by nl on Thursday May 20, 2010 @10:19AM (#1364058)
Which is why I said "..HTTPS is a good idea".

There are valid reasons why serving everything under HTTPS isn't always a good idea. The obvious one is CPU cost, but cache performance can also be affected. See, for example: http://blogs.msdn.com/ieinternals/archive/2010/04/21/Interne...

http://blog.pluron.com/2008/07/why-you-should.html

(I'm not saying that https isn't the best option. I'm just pointing out other options that can work with plain http.)

[ Parent | on HN ]