Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

O really? It seems people forgot about userdir.path (or similar). So user can expose whatever he wants via: https://emaildomain.com/~user/


Exactly. This convention is virtually non existent on the web in 2025.


Same-origin security problems kind of killed `https://host.tld/~user` in favor of `https://user.host.tld`.





Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: