Hacker News new | past | comments | ask | show | jobs | submit login

This very much depends. GitHub for example will return 404 for a private repository when you are logged out. The idea is balancing HTTP semantics with information leaking.



Does the 404 a logged out repo return in the same amount of time as a repo that doesn't truly exist?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: