ramen-hero
Re:Microsoft, stop sending user identifiers in clear text
on Monday October 05, 2015 @08:57AM (#10331475)
The profile picture URL looks like “https://cid-___.users.storage.live.com/___”. Both the host part and the path part contain your CID. The CID in the host name really doesn’t have an effect (from the client’s perspective); you could use, for example, “cid-0000000000000000.users.storage.live.com” instead, or really just “storage.live.com”.