Re: https in referer check

On Wed, 25 Jun 2003, Viljo Viitanen wrote:

> It seems http://validator.w3.org/check/referer does not work if it's called
> from an https page.

The HTTP/1.1 spec says:

   Clients SHOULD NOT include a Referer header field in a (non-secure)
   HTTP request if the referring page was transferred with a secure
   protocol.

http://www.w3.org/Protocols/rfc2616/rfc2616-sec15.html#sec15.1.3


-- 
Liam Quinn