应用截图
详细介绍
Automatically replaces insecure GET requests of search providers with secure/private POST requests.
Automatically replaces insecure GET requests of search providers with secure/private POST requests.
Version: 1.0.2
Supported Search Engines:
- Startpage
- DuckDuckGo
Tried to add the qwant privacy-centric search-engine but they don't support HTTP POST. Imagine my surprise.
Motivation
This is a pretty simple yet longstanding problem. We all know that if we visit a site with `https://` in the link, it means our web browser has an encrypted (SSL) connection to the web-site. This is great for securely submitting passwords and other personal data. The problem is, the characters that comprise the URL in a GET request are not private at all.
- POST requests aren't cached by the browser or search history (GET requests are).
- POST requests on an `https` site are hidden from your ISP (GET requests are not).
GET & POST Requests?
Let's say Alice visits `https://acmebank.com` where she logs into her bank account. To login, she submits a form on the bank's web-site containing her username and password. When she clicks the login/submit button, her username and password are sent securely to `acmebank.com` because:
- Login forms traditionally use the HTTP (Over HTTPS) method called POST.
- POST requests (Forms) are transmitted to the website via HTTP headers. If the URL starts with `https://`, the POST request is encrypted. No outside entities (Her ISP, governments, etc.) can directly spy on what Alice submitted. If it had instead been a GET request, Alice would see something like this in her address bar after clicking submit: `https://acmebank.com/login/?user=alice&password=monkey123`.
Search Engines Use GET? WHY!
It doesn't make much sense, does it? Go to just about any search engine, even the privacy-centric ones (DuckDuckGo, Startpage, etc.), and search for `test123`. You'll see that the address in the address-bar now contains your search query (Like `https://www.sta
Automatically replaces insecure GET requests of search providers with secure/private POST requests.
Version: 1.0.2
Supported Search Engines:
- Startpage
- DuckDuckGo
Tried to add the qwant privacy-centric search-engine but they don't support HTTP POST. Imagine my surprise.
Motivation
This is a pretty simple yet longstanding problem. We all know that if we visit a site with `https://` in the link, it means our web browser has an encrypted (SSL) connection to the web-site. This is great for securely submitting passwords and other personal data. The problem is, the characters that comprise the URL in a GET request are not private at all.
- POST requests aren't cached by the browser or search history (GET requests are).
- POST requests on an `https` site are hidden from your ISP (GET requests are not).
GET & POST Requests?
Let's say Alice visits `https://acmebank.com` where she logs into her bank account. To login, she submits a form on the bank's web-site containing her username and password. When she clicks the login/submit button, her username and password are sent securely to `acmebank.com` because:
- Login forms traditionally use the HTTP (Over HTTPS) method called POST.
- POST requests (Forms) are transmitted to the website via HTTP headers. If the URL starts with `https://`, the POST request is encrypted. No outside entities (Her ISP, governments, etc.) can directly spy on what Alice submitted. If it had instead been a GET request, Alice would see something like this in her address bar after clicking submit: `https://acmebank.com/login/?user=alice&password=monkey123`.
Search Engines Use GET? WHY!
It doesn't make much sense, does it? Go to just about any search engine, even the privacy-centric ones (DuckDuckGo, Startpage, etc.), and search for `test123`. You'll see that the address in the address-bar now contains your search query (Like `https://www.sta
