Hacker News new | ask | show | jobs
by mutemule 4499 days ago
I honestly don't understand why RequestPolicy doesn't get more love from the pro-privacy crowd. It does exactly what they want: prevents sites from issuing HTTP requests to other sites.

I once used a rather ambitious collection of addons, and I've since reduced it to just NoScript and RequestPolicy. And NoScript actually allows Javascript everywhere; it just has the XSS filter enabled. As a result, the vast majority of websites (with a categorical exception, below) work without any fiddling, and I don't see any third-party content at all: advertisements, share/like/+1 buttons, etc.

My only complaint about RequestPolicy is its lack of wildcard domain matching. I'd love to allow access from all sites to 'x.cloudfront.net', but that's not possible in the current version. (Rumour is that this is being fixed, and while I can confirm that wildcards are supported in the alpha version, it's definitely not ready for real-world usage yet.) Unfortunately, this means that some sites just don't work right; eg. 'x.blogspot.ca' always renders oddly, because they all pull from 'blogblog.com' and 'blogger.com'.