Re: https in referer check

On Thu, 2003-06-26 at 03:22, Liam Quinn wrote:
> On Wed, 25 Jun 2003, Viljo Viitanen wrote:
> 
> > It seems http://validator.w3.org/check/referer does not work if it's called
> > from an https page.
> 
> The HTTP/1.1 spec says:
> 
>    Clients SHOULD NOT include a Referer header field in a (non-secure)
>    HTTP request if the referring page was transferred with a secure
>    protocol.
> 
> http://www.w3.org/Protocols/rfc2616/rfc2616-sec15.html#sec15.1.3

See also <http://www.w3.org/Bugs/Public/show_bug.cgi?id=77>.

-- 
\/

Received on Thursday, 26 June 2003 09:33:20 UTC