1
vote
1answer
2k views

IP Address headers (Remote_Addr) - When is this header sent by the browser?

I want to know when a browser includes the header - Remote_Addr in the HTTP request. I observed the request sent by the browser on loading stackoverflow.com, in the web console window of Firefox. ...
4
votes
1answer
212 views

HTTP Headers caching

I am not totally sure bout HTTP headers, but from what I read its good to have some level of caching on static pages also I am not sure if Transfer Encoding: chunked is a good thing. I was not finding ...
2
votes
1answer
69 views

Why was 303 skipped in HTTP/1.0?

While looking back over HTTP response codes today I noticed that the 301, 302, and 304 response codes were defined in HTTP/1.0 but not the 303 response code. Does anyone know why the number 303 was ...
7
votes
1answer
135 views

Does the SPDY protocol eliminate the need for cookieless domains?

With plain HTTP, cookieless domains are an optimization to avoid unnecessarily sending cookie headers for page resources. However, the SPDY protocol compresses HTTP headers and in some cases ...
5
votes
1answer
3k views

HTTP Header Cache Time: s-maxage and max-age

I am setting up a CDN for my website, I found the following sample for adding to the 'httpd.conf' file, this is used to adjust the cache-time for client and CDN: ExpiresActive On ExpiresByType ...
13
votes
2answers
3k views

What are the Consequences for using Relative Location Headers?

According to the spec, Location headers used in a redirect require a server name HTTP/1.1 301 Moved Permanently ... Location: http://example.com/foo/baz/bar However, in 2012, most web browsers will ...
3
votes
1answer
226 views

Use - or misuse - of ETags

I'm using an application that sets ETags by md5()ing the URL. As I understand it, that's quite insane. In effect, it means that content for a specific URL won't be fetched anew ... ever. Unless a ...
3
votes
2answers
2k views

Should 304 Not Modified responses include the “Last Modified” header?

I've been using the most excellent http://redbot.org tool for testing have HTTP headers on my site correct (its custom code in PHP serving dynamic content - wanting to ensure it cached where possible ...
1
vote
2answers
199 views

Google Analytics when 404 handler is used as 'mod_rewrite'?

I'm consulting on a web site which in order to provide clean URL's uses the 404 handler to catch what would otherwise be a 404 and serve the correct content. In case that's not clear the 404 handler ...
2
votes
2answers
82 views

Verifying that a user comes from a 'partner' site?

We're building a Drupal module that is going to be given to trusted 'corporate partners'. When a user clicks on a link, he should be redirected to our site as if he's a logged in user. How should I ...
1
vote
2answers
1k views

Lots of HTTP HEAD requests originating from porn sites

The access log on my web server has a ton of HTTP HEAD requests coming from porn sites. What are HEAD requests and are they doing something bad with my site? Here is an excerpt from my log: (valid ...
4
votes
2answers
173 views

HTTP response for deleted or disabled items on ecommerce store

What HTTP response should you send when an item/category on your ecommerce site has been disabled or deleted? 410 looks correct for deleted products but not sure about something that has been disabled ...
11
votes
2answers
2k views

Considerations of the HTTP Content-MD5 Header

We are debating whether to use the Content-MD5 header. Pros: The CMS allows us to easily include it with minimal overhead (cached responses in 80%+ of the cases). It would add another layer of ...
5
votes
2answers
89 views

Browser privacy improvement implications for websites

On https://panopticlick.eff.org/ EFF let you test the number of uniquely identifying bits that the browser gives a website. Among these are HTTP header fields such as User-Agent, Accept, ...