[DominikPeters]

It will include many URLs that are semi-private, like Google Docs that are shared via link.

[ryandrake]

If some URL is accessible via the open web, without authentication, then it is not really private.

[bo1024]

What do you mean by accessible without authentication? My server will serve example.com/64-byte-random-code if you request it, but if you don’t know the code, I won’t serve it.

[chneu]

That's not any better than what archiveteam is doing. They're brute forcing the URLs to capture all of them. So privacy won't really matter here.

[charcircuit]

Then use something like argon2 on the keys, so you have to spend a long time to brute force them all similar to how it is today.

[high_na_euv]

So exclude them

[ceejayoz]

How?

How will they know a short link to a random PDF on S3 is potentially sensitive info?