Ian Jackson <ijackson <at> chiark.greenend.org.uk> writes: > For example, in this case, it would be technically possible for > (say) Google (or someone masquerading as Google) to change the icon > offered to Debian's Iceweasel to one which looks very like > Wikipedia's icon.
FWIW, there are DuckDuckGo iceweasel search plugins out there (don’t know if the one Debian ships is one of them) that encode the favicon, which makes it not download it: <Image width="16" height="16">data:image/x-icon;base64,AAABAAEAEBAAAAEAIAB[…] Maybe patch all the others to do that could help? bye, //mirabilos, who agrees those implicit requests are not so nice
