Tell HN: Don't use Postman, they proxy your info without your permission
- Investigating(current)
- Trending(upcoming)
- Workaround available(upcoming)
- Resolved(upcoming)
Executive summary
A recent update to the Postman client has caused it to proxy requests to its internal servers, which then forward them to the user's server (the actual request). This bypasses the expected behavior of sending data directly from the client to the server, leading to privacy concerns. The issue affects users who use the updated version of Postman.
No verified workaround yet
None of the linked reports describe a mitigation. Follow this incident to hear when one appears.
Under active investigation. No report has identified a root cause yet.
Evidence
1 report · 1 HNShow
- [1]HN First reportTell HN: Don't use Postman, they proxy your info without your permission(opens Hacker News thread in a new tab)
When you send a POST request to your server, you think you're sending the information to YOUR server, right? That was the default behaviour - as it should be. After updating the Postman client, I noticed Postman also sends the request to their internal servers, which then sends your server the actual request (proxying). I thought I was paranoid until another commenter confirmed the same (https://news.ycombinator.com/item?id=50358055). It's fucking annoying that something called POSTman does…
by neya 108upvotes 7comments
Timeline
- First report on Hacker News thread
Tell HN: Don't use Postman, they proxy your info without your permission
Source