# "Share a link" for a post should not leak username

**URL:** https://meta.discourse.org/t/share-a-link-for-a-post-should-not-leak-username/66489
**Category:** Feature
**Tags:** completed
**Created:** [20 ביולי,‏ 2017,‏ 5:23am UTC](https://meta.discourse.org/t/share-a-link-for-a-post-should-not-leak-username/66489 "2017-07-20T05:23:45Z")
**Posts on this page:** 8
**Page:** 2

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [14 בינואר,‏ 2022,‏ 6:39pm UTC](https://meta.discourse.org/t/share-a-link-for-a-post-should-not-leak-username/66489/22 "2022-01-14T18:39:53Z")

</div>

> [@sam](#):
>
> Site setting to completely disable appending of `?u=sam` to links discourse renders when you click the chain icon

This is what I’m thinking. Simple and clean. Per user doesn’t make sense to me, we already have options explosion on the user preferences sadly.. 😭

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [14 בינואר,‏ 2022,‏ 9:20pm UTC](https://meta.discourse.org/t/share-a-link-for-a-post-should-not-leak-username/66489/23 "2022-01-14T21:20:29Z")

</div>

Sadly this proposed obsfucation implementation is significantly more complex, I guess the difference between building the feature in a week or a few hours.

Plus it does not address the fundamental privacy concern

> [@RalfJung](#):
>
> You are literally tracking people across the internet for the benefit of some cute badges

---

<div class="post-metadata">

### Author: ![seanblue](https://avatars.discourse-cdn.com/v4/letter/s/dc4da7/32.png) [@seanblue](https://meta.discourse.org/u/seanblue)
#### Post date: [14 בינואר,‏ 2022,‏ 9:36pm UTC](https://meta.discourse.org/t/share-a-link-for-a-post-should-not-leak-username/66489/24 "2022-01-14T21:36:34Z")

</div>

> [@sam](#):
>
> Plus it does not address the fundamental privacy concern

I was thinking about it from the perspective of leaking information out of the community, but I guess leaking info to the admins is a factor too, depending on the community and the individual.

Personally, I trust the admins of the site I use enough to not care if they see me sharing links. I mostly remove my username from the URL when sharing links outside the community itself, and even then that’s more to keep the URL clean than to hide the fact that it was me who shared it.

> [@sam](#):
>
> Sadly this proposed obsfucation implementation is significantly more complex, I guess the difference between building the feature in a week or a few hours.

Fair enough!

---

<div class="post-metadata">

### Author: ![yhh9xdq7d](https://avatars.discourse-cdn.com/v4/letter/y/f0a364/32.png) [@yhh9xdq7d](https://meta.discourse.org/u/yhh9xdq7d)
#### Post date: [21 בינואר,‏ 2022,‏ 9:11pm UTC](https://meta.discourse.org/t/share-a-link-for-a-post-should-not-leak-username/66489/25 "2022-01-21T21:11:20Z")

</div>

The problem is not that administrators see who you bring to the community, but that other users who read your link (for example, shared on social networks) know who you are in the forum, or not? So, I think that it would be enough to simply make sure that each user has a “referal id/code” random and not the same as their nickname, but associated with their nickname. This would probably also be the easiest, fastest and most functional solution with a hint of privacy.

---

<div class="post-metadata">

### Author: ![orenwolf](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/orenwolf/32/119529_2.png) [@orenwolf](https://meta.discourse.org/u/orenwolf)
#### Post date: [15 בספטמבר,‏ 2022,‏ 5:07pm UTC](https://meta.discourse.org/t/share-a-link-for-a-post-should-not-leak-username/66489/26 "2022-09-15T17:07:52Z")

</div>

Would just obfuscating the username so it wasn’t obviously a username work? Then you can continue to track without exposing any public info?

---

<div class="post-metadata">

### Author: ![attj](https://avatars.discourse-cdn.com/v4/letter/a/a698b9/32.png) [@attj](https://meta.discourse.org/u/attj)
#### Post date: [15 בספטמבר,‏ 2022,‏ 5:19pm UTC](https://meta.discourse.org/t/share-a-link-for-a-post-should-not-leak-username/66489/27 "2022-09-15T17:19:35Z")

</div>

Is it possible to disable this now?

---

<div class="post-metadata">

### Author: ![vinothkannans](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/vinothkannans/32/86465_2.png) [@vinothkannans](https://meta.discourse.org/u/vinothkannans)
#### Post date: [22 בספטמבר,‏ 2022,‏ 5:43pm UTC](https://meta.discourse.org/t/share-a-link-for-a-post-should-not-leak-username/66489/32 "2022-09-22T17:43:40Z")

</div>

[https://github.com/discourse/discourse/commit/998bd191a52e86db8ad0cc9c108535c144b6cc74](https://github.com/discourse/discourse/commit/998bd191a52e86db8ad0cc9c108535c144b6cc74)

Now we have a site setting to disable the username.

---

<div class="post-metadata">

### Author: ![vinothkannans](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/vinothkannans/32/86465_2.png) [@vinothkannans](https://meta.discourse.org/u/vinothkannans)
#### Post date: [29 בספטמבר,‏ 2022,‏ 7:43am UTC](https://meta.discourse.org/t/share-a-link-for-a-post-should-not-leak-username/66489/33 "2022-09-29T07:43:21Z")

</div>



[Previous page](https://meta.discourse.org/t/share-a-link-for-a-post-should-not-leak-username/66489.md?page=1)
