Settings: add option to hide referer on outgoing clicks (question)

[dhowe]

Tradeoff seems clear: referer header leaks page-trail to adnetwork (which they would have anyway without ABP), but its absence is a signal that the click is not human-generated.

Question is whether this (disable-referrer-header-on-clicks) should be a user-option (default would be off=referer-sent)

[mushon]

Why hide it? +why should we worry about it right now?

[dhowe]

this is implemented, but not exposed (for now) to user

[olivierlemoal]

Maybe the referer should be stripped, as it may contain sensitive data which can be retrieved by the adnetwork (for instance an email address in a GET parameter after filling a bad-designed registration form...)

[dhowe]

an interesting/important question -- what you say is correct... however lack of referer is an easy giveaway that the click is not 'real'. I'm leaning toward making it a user option, but now thinking about what the default should be...

[dhowe]

@mushon, either way we may need some explanatory text designed into the settings panel...

[mushon]

Filed under: Next Tasks

[dhowe]

done for v1.1