Comment by mooism2

I presume most websites that weren't expecting to find an O2 number in the HTTP headers won't have looked for it, won't have logged it, etc.

If I send a secret to you in the post, and you put the envelope in the recycling unopened, have I disclosed a secret to you?