Tell HN: Don't use Postman, they proxy your info without your permission
When you send a POST request to your server, you think you're sending the information to YOUR server, right? That was the default behaviour - as it should be. After updating the Postman client, I noticed Postman also sends the request to their internal servers, which then sends your server the actual request (proxying). I thought I was paranoid until another commenter confirmed the same (https://news.ycombinator.com/item?id=50358055). It's fucking annoying that something called POSTman does anything but that. Please don't use Postman for anything sensitive. It's borderline spyware, especially when you didn't consent to this behavior.
First I've seen of this, thanks HN. Almost every SAAS I've worked with this year has used Postman or offered a Postman collection, so a bit surprised this isn't more widely appreciated.
Is Bruno the general replacement now, for general purpose / enterprise users?
Is this only an issue with the web version, rather than the desktop client?
Is Bruno the general replacement now, for general purpose / enterprise users?
Is this only an issue with the web version, rather than the desktop client?
It was also pretty easy to export my Postman stuff and import it directly into Yaak.
I've heard about issues with telemetry in Bruno, which apparently still phones home regardless of user preferences. [2]
Obviously both being open-source you can just fork and rip out the telemetry though.
[1] - https://github.com/mountain-loop/yaak
[2] - https://github.com/usebruno/bruno/issues/337
Includes suggested replacements, lots of bots, accounts saying enshittification. The whole nine yards