News for hackers. Stuff that matters.
Re:The UK's Controversial Online Safety Act Is Now Law by throwaway290 on Monday October 30, 2023 @01:51AM (#38066128)
> revealing which specific services your customers used - for example, whether they read a page about Kennedy or about Oswald

If you authenticate with OAuth, the OAuth server doesn't get to know what particular subresources you visit. It only gets to know which URL initiated the authentication (and whether it tracks even that is an open implementation question).

In other words sure Wikipedia can tell government what pages you visit, but to say that this law does enable that or require that even as a side effect is pure FUD.

There are no comments on this comment yet.