• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

(xf2) avoid friendly urls in /conversations/

ENF

Well-known member
#4
the conversation title is visible. The content is protected.
I can't see the conversation title... (testing with a valid conversation URL that I know is there but accessing from a guest and user that's not in the conversation.)

You can put whatever you like in the URL, guessing, but the system doesn't confirm or reveal the existence of a valid conversation title. UNLESS, you've modified something that would make this possible

I'm being persistent here because this would be a significant issue for us but I can't reproduce a case that would risk the content of a conversation title. (or URL)
 

ENF

Well-known member
#6
the service provider (telecommunications provider) has access to the urls you visit.
Yes, the [webserver*] logs would show the URL but in this case, we're not going to worry about if an ISP is spying on a specific website. I'm not an ISP, but I understood that by basic principle HTTPS traffic (url details) cannot be read by ISP/Telcom providers. Domains, yes. Specific URLs, no.

*Concurrently, proper access controls should be in place on any logging facility. That's on the site operator and/or hosts, etc. It becomes an ethics issue if a host is eavesdropping on their client's logs. (and so on...)
 

DragonByte Tech

Well-known member
#7
the service provider (telecommunications provider) has access to the urls you visit.
Then perhaps you should invent some form of code language on your forum so that you don't divulge details of your drug deals in the title of the conversations. If TV has taught me anything (and we all know the TV, like the internet, never lies), plant names are common substitutes.

Chrysanthemum = weed, cactus = E, etc.

If you do this, you won't have to worry about your ISP passing on the details they see in the URLs to the police. Unless your website domain is already on a list, in which case you may need a new domain name.

Or alternatively you can just not sell drugs on your forum, there's always that :p


Fillip
 

ENF

Well-known member
#8
Then perhaps you should invent some form of code language on your forum so that you don't divulge details of your drug deals in the title of the conversations. If TV has taught me anything (and we all know the TV, like the internet, never lies), plant names are common substitutes.

Chrysanthemum = weed, cactus = E, etc.

If you do this, you won't have to worry about your ISP passing on the details they see in the URLs to the police. Unless your website domain is already on a list, in which case you may need a new domain name.

Or alternatively you can just not sell drugs on your forum, there's always that :p


Fillip
Wow. Ok... Good answer. Glad I don't have THAT problem, lol!
 

Marcus

Well-known member
#9
i think the conversation has gone a bit off topic, but we can all agree we do not need to convert conversation urls into "friendly urls" so that search engines put them higher in their search results.
 

DragonByte Tech

Well-known member
#10
i think the conversation has gone a bit off topic, but we can all agree we do not need to convert conversation urls into "friendly urls" so that search engines put them higher in their search results.
All jokes aside, it would make absolutely no sense to have Conversations be the only thing not using friendly URLs. That would be a huge inconsistency and would require them to either build a whole new system, or partially rebuild the existing system, to support something that (I'd wager) no-one other than you want.

Add that to the fact that they would be drowning in support tickets asking why the conversations weren't using friendly URLs, you've got yourself a prime candidate for the "thanks but no thanks" bin.


Fillip
 

HWS

Well-known member
#11
Friendly URL or not, titles of private conversations should not be disclosed in the URL. Thats a fact. ;)
Should be solved for XF1 and XF2.