logoalt Hacker News

Tell HN: Don't use Postman, they proxy your info without your permission

38 points • by neya • today at 2:43 AM • 1 comment • view on HN

When you send a POST request to your server, you think you're sending the information to YOUR server, right? That was the default behaviour - as it should be. After updating the Postman client, I noticed Postman also sends the request to their internal servers, which then sends your server the actual request (proxying). I thought I was paranoid until another commenter confirmed the same (https://news.ycombinator.com/item?id=50358055). It's fucking annoying that something called POSTman does anything but that. Please don't use Postman for anything sensitive. It's borderline spyware, especially when you didn't consent to this behavior.


Comments

gnabgib • today at 3:33 AM

Gigantic discussion (1084 points, 10 hours ago, 359 comments) https://news.ycombinator.com/item?id=50354960

Includes suggested replacements, lots of bots, accounts saying enshittification. The whole nine yards

scsoi • today at 6:12 AM

[flagged]