Rich Graves wrote:
A friend who webmasters a large site that is implementing referer-specific content sent me this when I mentioned the cpunks/cryptography thread of a few months back. I basically agree with the W3C. While user education on the potential privacy threat is essential, I do not believe that Netscape should violate published technical standards. There are also privacy and property issues from the server's perspective.
Just in case someone hasn't heard about this yet, we support a stealth preference in 4.0 to turn of referer headers. If you wish to disable referer, you can place the following line in your prefs.js file: pref("network.sendRefererHeader", false); There is no UI checkbox for this preference because it was added after we froze the UI. -- You should only break rules of style if you can | Tom Weinstein coherently explain what you gain by so doing. | tomw@netscape.com