# Not exposing file path in URL

**URL:** https://community.silverbullet.md/t/not-exposing-file-path-in-url/3095
**Category:** Ideas
**Created:** [August 27, 2025, 6:54am UTC](https://community.silverbullet.md/t/not-exposing-file-path-in-url/3095 "2025-08-27T06:54:51Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![fiddler](https://community.silverbullet.md/letter_avatar_proxy/v4/letter/f/e8c25b/32.png) [@fiddler](https://community.silverbullet.md/u/fiddler)
#### Post date: [August 27, 2025, 6:54am UTC](https://community.silverbullet.md/t/not-exposing-file-path-in-url/3095/1 "2025-08-27T06:54:51Z")

</div>

iirc, internet service providers keeps records of traffic

So if person regularly use SB, with these folders: thought, plan, project, problem. They can predict future actions of user and can make profile of them.

We can use `displayName` attribute with `UID` or `Date` as file name. But it have its own problems

---

<div class="post-metadata">

### Author: ![MrMugame](https://community.silverbullet.md/user_avatar/community.silverbullet.md/mrmugame/32/358_2.png) [@MrMugame](https://community.silverbullet.md/u/MrMugame)
#### Post date: [August 27, 2025, 10:29am UTC](https://community.silverbullet.md/t/not-exposing-file-path-in-url/3095/2 "2025-08-27T10:29:15Z")

</div>

If you are exposing your SB instance to the internet somehow, you should at a minimum be using http **s** , which means your service provider only knows _that_ your visited your SB instance, but nothing else, not at which path or what content you viewed.

---

<div class="post-metadata">

### Author: ![zef](https://community.silverbullet.md/user_avatar/community.silverbullet.md/zef/32/7_2.png) [@zef](https://community.silverbullet.md/u/zef)
#### Post date: [August 27, 2025, 10:38am UTC](https://community.silverbullet.md/t/not-exposing-file-path-in-url/3095/3 "2025-08-27T10:38:38Z")

</div>

Indeed. Effectively SilverBullet only works via HTTPs (or localhost), so paths are not visible to hosting providers.