News for hackers. Stuff that matters.

A comment on GDPR penalty for passing on of IP address to Google by using Google Fonts. Parent comment

Re:GDPR penalty for passing on of IP address to Google by us... by codethief on Sunday January 30, 2022 @08:05AM (#30136839)
> assuming there’s no Referer header - which there won’t be, assuming Referer-Policy is set sanely (which by default it is in all browsers)?

In Firefox 96 network requests to 3rd parties (in this case Google) still seem to include the 1st-party hostname as REFERER header.

[ Parent | on HN ]
Re:GDPR penalty for passing on of IP address to Google by us... by account42 on Monday January 31, 2022 @06:16AM (#30146803)
Which is really shitty behavior from a browser that wants to claim to care about privacy.

But even without a referer it gives Google some information, even if its just that this user (ip, useragent, other identifying bits) is currently exists.

[ Parent | on HN ]