Re: Firefox security question



Crashdamage <03z1krd7@xxxxxxxxxxxxxx> wrote:
Also a good idea to not allow websites to track what other sites you've
been to. To do that, scroll on down to these 2 lines and double-click
them so they are reset like this:

network.http.send RefererHeader user set integer 0

Referer (a thousand curses on the nameless Netscape employee who
couldn't spell) is only sent if you click on a link, _not_ if you enter
the address manually. (RFC 2616, 14.36: "The Referer field MUST NOT be
sent if the Request-URI was obtained from a source that does not have
its own URI, such as input from the user keyboard.") It's hardly a
general-purpose way for websites to "track what other sites you've been
to", anyway. I agree that it's bad to leak information in general, but
the Referer header is hardly a major concern, given that there had to be
a link for you to click on anyway.

--
Oh to have a lodge in some vast wilderness. Where rumors of oppression
and deceit, of unsuccessful and successful wars may never reach me
anymore.
-- William Cowper
.