News for hackers. Stuff that matters.

A comment on HTTP headers we don't want. Parent comment

Re:HTTP headers we don't want by buro9 on Tuesday May 15, 2018 @04:51PM (#17077767)
Why better?

Via is a MUST https://tools.ietf.org/html/rfc7230#section-5.7.1

Forwarded is OPTIONAL https://tools.ietf.org/html/rfc7239#section-4

Protecting against loops only works with MUST headers.

[ Parent | on HN ]
Re:HTTP headers we don't want by ttwwmm on Tuesday May 15, 2018 @07:15PM (#17078728)
Additionally, Forwarded is only for requests, while Via is for both requests and responses.
[ Parent | on HN ]
Re:HTTP headers we don't want by voidlogic on Tuesday May 15, 2018 @06:52PM (#17078613)
Makes sense. Thanks!
[ Parent | on HN ]