Show HN: How privacy-friendly is your site?
webbkoll.dataskydd.net
Show HN: How privacy-friendly is your site?
1–10 of 45 posts
Re: Show HN: How privacy-friendly is your site?
#2If you enter a URL in the suggested format – with http:// – you get an error.
> Invalid domain: http://http//www.coruscade.com
Either change the placeholder or, preferably, detect whether the user’s input contains http:// and adjust accordingly.
Re: Show HN: How privacy-friendly is your site?
#3Didn't know about no-referrer, thanks !
Re: Show HN: How privacy-friendly is your site?
#4Really nice! Positive and negative results are marked green and red. Colorblind users will need additional visual clues (e.g. checkmark vs cross) to differentiate between the sections.
Re: Show HN: How privacy-friendly is your site?
#5If you enter a URL in the suggested format – with http:// – you get an error. > Invalid domain: http://http//www.coruscade.com Either change the placeholder or, preferably, detect whether the user’s input contains http:// and adjust accordingly.
If I enter https:// for a site I manage, the tool automatically changes it to http://, claims that's what I entered, and then tells me the connection is not secure.
Needs work.
Re: Show HN: How privacy-friendly is your site?
#6Well done. Caught some things on one of my projects that https://securityheaders.com/ missed
Re: Show HN: How privacy-friendly is your site?
#7If you enter a URL in the suggested format – with http:// – you get an error. > Invalid domain: http://http//www.coruscade.com Either change the placeholder or, preferably, detect whether the user’s input contains http:// and adjust accordingly.
If I enter https:// for a site I manage, the tool automatically changes it to http:// , claims that's what I entered, and then tells me the connection is not secure. Needs work.
I think this means that the tool is not automatically being redirected to https:// when visiting your website at http://, so it's marked as insecure (See point 2. on the website).
Re: Show HN: How privacy-friendly is your site?
#8> Your browser then sends Referer: ...
While I don't doubt dataskydd's good intentions, their advice about referrers is a sign that we live in Clown World.
Yes, your browser's tendency to provide a referrer might well give away information you would prefer it didn't. Unfortunately for you, the browser vendors have chosen to provide browsers that do that.
In a parallel universe it would be obvious that this is a problem (among many) for the browser vendors to address. In Clown World, you are supposed to rely on each and every site providing a special response header.
Re: Show HN: How privacy-friendly is your site?
#9> Your browser then sends Referer: ... While I don't doubt dataskydd's good intentions, their advice about referrers is a sign that we live in Clown World. Yes, your browser's tendency to provide a referrer might well give away information you would prefer it didn't. Unfortunately for you, the browser vendors have chosen to provide browsers that do that. In a parallel universe it would be obvious that this is a probl…
It's not an either/or thing at all. The browsers are slowly trying to tighten policies on Referer, but it's a process because there are still some webpages that unfortunately rely on it being sent. (You can force it off, at least in Firefox, if you want to.) The point of this site header is so that sites that don't need Referer to be set can explicitly tell your browser that, protecting you from snooping third parties.
Re: Show HN: How privacy-friendly is your site?
#10Really nice tool actually. Need to fix some things on my site though ...