Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Spoof HTTP referrer string of third-party requests #855

Closed
semente opened this issue Jun 3, 2016 · 1 comment
Closed

Spoof HTTP referrer string of third-party requests #855

semente opened this issue Jun 3, 2016 · 1 comment
Labels
enhancement privacy General privacy issues; stuff that isn't about Privacy Badger's heuristic

Comments

@semente
Copy link

semente commented Jun 3, 2016

Once I can't use uMatrix's "HTTP referrer spoof "option because plugin compatibility issues (see #562), would be great if you add into Privacy Badger an option to spoof the HTTP referrer string of any third-party requests instead just for the tracking domains...

I think the way how uMatrix spoof HTTP referrers protects your privacy and still don't cause any issues in websites that uses this information-at least I didnt' have any issue so far with this setup.

If this setting is checked, uMatrix will spoof the HTTP referrer information if the domain name of the HTTP referrer is third-party to the domain name of net request.

Thank you.

@ghostwords
Copy link
Member

We're switching to trimming referrers down to the origin (instead of removing entirely) for cookieblocked requests (#2505). Depending on how that pans out, we may do the same for more (all?) third-party requests in the future.

Spoofing the referrer (to the request domain) does break sites (NASA TV, for example), while providing unclear benefits versus removing referrer entirely, or reducing the amount of information disclosed. Closing for now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement privacy General privacy issues; stuff that isn't about Privacy Badger's heuristic
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants