[anti-abuse-wg] Google Privacy Abuse

Dear Ac & Fi

That was what I was replying to Fi's comment:

> If opera (like chrome, edge or firefox) check the URL to see if it
> is "dangerous" (a phishing URL etc) then that is logged on their
> end, when it checks the database to see if the link has been
> flagged.


Re:
> It is a simple technical fact that ISP's etc - Do Not Have, receive or
> are able to read the actual URL. - Please do see the https protocol
> itself, for additional information.

Read my answer again: It said they can see it if it is http, but not if
it is https.

Would you agree?

Re Fi's Question:
> Please provide your source of information that chrome browsers rely on a local blacklist.

See https://blog.chromium.org/2012/01/all-about-safe-browsing.html

You can verify this yourself by looking at browser trafic with a MITM
setup, e.h. using sslsplit


Best
Serge




-- 
Dr. Serge Droz
Member of the FIRST Board of Directors       Senior Advisor
https://www.first.org                        https://www.ict4peace.org