W3C home > Mailing lists > Public > www-validator@w3.org > June 2003

Re: https in referer check

From: Ville Skyttä <ville.skytta@iki.fi>
Date: 26 Jun 2003 16:33:18 +0300
To: www-validator@w3.org
Message-Id: <1056634398.13159.22.camel@bobcat.ods.org>

On Thu, 2003-06-26 at 03:22, Liam Quinn wrote:
> On Wed, 25 Jun 2003, Viljo Viitanen wrote:
> 
> > It seems http://validator.w3.org/check/referer does not work if it's called
> > from an https page.
> 
> The HTTP/1.1 spec says:
> 
>    Clients SHOULD NOT include a Referer header field in a (non-secure)
>    HTTP request if the referring page was transferred with a secure
>    protocol.
> 
> http://www.w3.org/Protocols/rfc2616/rfc2616-sec15.html#sec15.1.3

See also <http://www.w3.org/Bugs/Public/show_bug.cgi?id=77>.

-- 
\/
Received on Thursday, 26 June 2003 09:33:20 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Wednesday, 25 April 2012 12:14:09 GMT