HNHacker News
TopNewBestAskShowJobs

ramen-hero

93 karma · joined October 5, 2015

submissionscomments
ramen-hero··on Microsoft, stop sending user identifiers in clear text
The profile picture URL looks like “https:‍//cid-___.users.storage.live.com/___”. Both the host part and the path part contain your CID. The CID in the host name really doesn’t have an effect (from the client’s perspective); you could use, for example, “cid-0000000000000000.users.storage.live.com” instead, or really just “storage.live.com”.