To do this, Web-sites should really make use of the origin-when-cross-origin plan. This will permit supporting browsers to send just the origin as the Referer header. This restricted referral information applies even if both sites use HTTPS.Moreover, attackers can even now evaluate encrypted HTTPS targeted visitors for “facet channel” details.