TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Ask HN: Is RESTful style URL against privacy?

1 点作者 dorafmon超过 1 年前
I have a question around privacy, want to see your guys thoughts, so the industry has been pushing for RESTful style of URL for maybe a decade now, but isn’t RESTful a bit against privacy? I mean if I use a DNS I cannot trust, then they can simply record every url I visit and based on the url they can figure out a lot about me? A very intuitive example would be say if I click by accident on some NSFW subreddit's link, then the DNS provider can detect that and think I am browsing that on purpose. In that case isn't an obfused URL better?

2 条评论

mtmail超过 1 年前
Full URL: <a href="https:&#x2F;&#x2F;example.com&#x2F;path&#x2F;document.html" rel="nofollow noreferrer">https:&#x2F;&#x2F;example.com&#x2F;path&#x2F;document.html</a><p>DNS providers resolve the host name only (example.com =&gt; (93.184.216.34), it doesn&#x27;t see the rest of the URL (path, parameters).<p>Do you mean ISP (your internet service provider)? With HTTPS the connection to the website is encrypted. The ISP can only see that you connect to the domain name, not the path or parameters. With unencrypted HTTP they&#x27;d be able to see the full URL.<p>&gt; In that case isn&#x27;t an obfused URL better?<p>As long as the connection is encrypted (<a href="https:&#x2F;&#x2F;" rel="nofollow noreferrer">https:&#x2F;&#x2F;</a>...) it should be fine. Obfuscated URLs would help you when you worry that somebody is accessing your browser cache, bookmarks or a browser plugin sending URL to a third-party.
richardjam73超过 1 年前
Doesn&#x27;t the DNS only see the domain name? The browser doesn&#x27;t send it the full URL.