告诉 HN：不要使用 Postman，他们会在未经您许可的情况下代理您的信息
3 分•作者: neya•大约 10 小时前
当你向服务器发送 POST 请求时，你认为你是在将信息发送到“你的”服务器，对吧？这本应是默认行为，而且也应该是这样。在更新 Postman 客户端后，我注意到 Postman 也会将请求发送到他们自己的内部服务器，然后由内部服务器将实际请求转发给你的服务器（即代理）。我以为是我多疑了，直到另一位评论者也证实了这一点（https://news.ycombinator.com/item?id=50358055）。一个叫做 POSTman 的工具却做了与此无关的事情，这真是他妈的令人讨厌。请不要将 Postman 用于任何敏感信息。它简直就是间谍软件，尤其是在你没有同意这种行为的情况下。
查看原文
When you send a POST request to your server, you think you're sending the information to YOUR server, right? That was the default behaviour - as it should be. After updating the Postman client, I noticed Postman also sends the request to their internal servers, which then sends your server the actual request (proxying). I thought I was paranoid until another commenter confirmed the same (https://news.ycombinator.com/item?id=50358055). It's fucking annoying that something called POSTman does anything but that. Please don't use Postman for anything sensitive. It's borderline spyware, especially when you didn't consent to this behavior.