How privacy-friendly is your site?
Security and privacy
website privacy checker
SHOW HN2018
How privacy-friendly is your site?
Checks how privacy-friendly a website is and suggests fixes.AI
webbkoll.dataskydd.net#privacy#website audit#http headers#third-party requests#referrer policy
How HN took it
15 positive, 15 neutral or asking, 1 mixed, 3 critical, out of 34 comments about the project. Thread score +0.41.
Privacy: 4 for, 0 againstDesign: 0 for, 2 againstDocs: 1 for, 1 againstIdea: 1 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Useful for finding privacy and security header fixes
From 4 comments
Good tool, inspired me to fix up my homepage a bit since a few broken pieces got me downrated (though legitimate hits).
zaarn on HNWell done. Caught some things on one of my projects that https://securityheaders.com/ missed
subcosmos on HNNice! It seems there are some things I overlooked on the websites I manage — HTTP headers for XSS, HSTS and such, which are going to be easy enough to add. Kudos to the authors,…
ealhad on HNNice tool! I just added some of the recommended headers on my personal (static, single origin) sites. It's minor, but you could add Apache and/or Nginx and/or Lighttpd examples…
woodruffw on HN
Informative and easy to understand
From 1 comment
@andersju Thanks for making this web site. I have used this site in the past, and it helped me make my Hugo generated static site more secure. Your site is very informative, and…
kaushalmodi on HN
Objections
Referrer Policy browser support claims were inaccurate for Edge and IE
From 1 comment
> While still a work in progress, Referrer Policy is now supported by all major browsers (except Internet Explorer, although it is supported by Edge, the new browser in Windows…
chrismorgan on HN
Entering http:// or https:// in the input gives errors or wrong URL
From 2 comments
If you enter a URL in the suggested format – with http:// – you get an error. > Invalid domain: http://http//www.coruscade.com Either change the placeholder or, preferably,…
jen729w on HNIf I enter https:// for a site I manage, the tool automatically changes it to http://, claims that's what I entered, and then tells me the connection is not secure. Needs work.
reaperducer on HN
Requests
Show top sites or lists of URLs to check
From 2 comments
Great tool. But if you'd have a list of top 10 checked sites at the top, say by sum of all three counters, it could actually bring some action, no one would like to be in this…
auslander on HNHey, I'm the main author of this. Happy to see that people like it! As I wrote elsewhere in the comments we're planning to redesign the results page and rewrite all the text…
andersju on HN
Add Apache, Nginx and Lighttpd config examples
From 1 comment
Nice tool! I just added some of the recommended headers on my personal (static, single origin) sites. It's minor, but you could add Apache and/or Nginx and/or Lighttpd examples…
woodruffw on HN
Explain why CDN libraries are flagged
From 1 comment
Thanks for making this. It says the following but did not provide more info about why: > The site is loading libraries from one or more CDN:s. Self-host the files. Is it on the…
stockkid on HN
Questions
Why are CDN-loaded libraries flagged, and is it about referrer leaks?
From 1 comment
Thanks for making this. It says the following but did not provide more info about why: > The site is loading libraries from one or more CDN:s. Self-host the files. Is it on the…
stockkid on HN
Meta referrer tag versus Referrer-Policy header: which is better?
From 1 comment
I have added `Referrer-Policy` header to my nginx configuration instead. What is better meta tag or header and why?
tananaev on HN
Alternatives named
PrivacyScore
From 1 comment
Hey, I'm the main author of this. Happy to see that people like it! As I wrote elsewhere in the comments we're planning to redesign the results page and rewrite all the text…
andersju on HN
securityheaders.com
From 1 comment
Well done. Caught some things on one of my projects that https://securityheaders.com/ missed
subcosmos on HN