mritzmann

Don't understand the point of this HN post. This has been the case since at least 2008. See: https://web.archive.org/web/20081001000000*/gmail.com

Or you can set the header in your web server configuration.

You don't need a plugin for this (every plugin is a security risk). You only need to send one single http header.

Turn off notifications. View manually once an hour.

I am wondering why this is not on top of Hacker News. I have problems with GitHub Pages, Reddit and various other services. Europe region.

Own WAF with ModSecurity and DDoS Protection on Layer 7? Something like Cloudflare Magic Transit. But every bigger DDoS Protection Service habe some sort of Layer 7 Product for Enterprise.

So, you think it is my fault when Bitwarden send my Password to a site without my consence?

Are you sure that "start from" is a good idea? Maybe (i don't know) with this google.com.example.com is the same like google.com? So your maybe send your password automatically to a phishing site because of this.

I think the reason is, that Bitwarden can't interact with a BasicAuth dialog because of missing browser APIs. This may be the reason why Bitwarden use this as a workaround: Send the basic auth always automatically (basic auth is only a http header) if a BasicAuth is detected.

Why is the title misleading? Bitwarden leaked my password for subdomain A to subdomain B and does this even if auto-fill is set to off. That is exactly what the title says.

In my case even plaintext, because subdomain B has no HTTPS.

As Mozilla always says: Default Settings Matter. And here it is even, that Bitwarden ignores my own settings. Bitwarden ignores that Auto-Fill is switched off.

Maybe this: https://threadreaderapp.com/thread/1307614248835731456.html

They have Cloudflare Workers (with limited disk space), but act as a caching proxy is still the main business of Cloudflare. So i think acting as a proxy make sense for Cloudflare.

With exit..

This issue is the reason why I left Nextcloud this February. Nextcloud is a great software and i like the feeling of freedom and privacy. But, if I have to choose between data consistency and data privacy, then I choose data consistency.

Losing important photos and memories is something that must not happen. The worst thing is: The user may not notice the problem.

* In my case 15 of 23 photos were uploaded (In other words, I would have to count the photos after uploading them)

* Nextcloud does not report an error to the user

I was lucky that my smartphone has a trash bin and I even noticed the problem.

Thats possible. Here an example of a open source mail server: https://github.com/mailcow/mailcow-dockerized/blob/f5522a809... They consider some TLDs as "fishy".