HTTP 2.0の最新動向 SPDYからHTTP/2.0へ~HTTPbis WG Interim Meetingレポート (2013/3/25 06:00) 2013年1月30日から3日間に渡り、東京六本木のGoogle Japanを会場として、HTTPbis WG Interim Meetingが開催された。そこでは、30名弱の参加者によってHTTP/2.0... 続きを読む
W3C Working Group Note 29 May 2012 This Version: http://www.w3.org/TR/2012/NOTE-from-origin-20120529/ Latest Version: http://www.w3.org/TR/from-origin/ Latest Editor Draft: http://dvcs.w3.org/hg/from-origin/raw-file/tip/Overview.html Previous... 続きを読む
完全に釣りタイトルですけど中身は真面目に書くよ。 近年、ウェブサイトのHTTPS化が流行のようになっている。私の知る限り、Googleの各種サービスやTwitter、Facebookなどが完全にHTTPSで通信を行うようになっている。HTTPS、つまりSSLによる通信の暗号化によ... 続きを読む
The X-Frame-Options HTTP response header can be used to indicate whether or not a browser should be allowed to render a page in a <frame> or <iframe>. Sites can use this to avoid clickjacking attacks, by ensuring that their content is not emb... 続きを読む
Someone recently asked me for a list of custom HTTP request and response headers introduced by the IE team over the years. Here's the list I've come up with so far (including a few that were introduced before I joined the team): Request Head... 続きを読む
Work in Progress — Last Update 27 July 2011 Latest version: http://mimesniff.spec.whatwg.org/ Version history: https://github.com/abarth/websec/commits/master/drafts/sniff.html Issues: To send feedback by e-mail: whatwg@whatwg.org Editors: A... 続きを読む
Internet Engineering Task Force (IETF) M. Nottingham Request for Comments: 6585 Rackspace Updates: 2616 R. Fielding Category: Standards Track Adobe ISSN: 2070-1721 April 2012 Additional HTTP Status Codes Abstract This document specifies addit... 続きを読む
[Docs] [txt|pdf|html] [Tracker] [WG] [Email] [Diff1] [Diff2] [Nits] Versions: (draft-melnikov-mime-default-charset) 00 Applications Area Working Group A. Melnikov Internet-Draft Isode Limited Updates: 2046 (if approved) J. Reschke Intended st... 続きを読む
Published:October 21st, 2009 Comments:4 Comments Category:Firebug, HAR, NetExport, Planet Mozilla We have been working with Simon Perkins and Steve Souders on an open format for exporting HTTP tracing information. It's called HTTP Archive (HA... 続きを読む
The checking of the HTTP referer is sometime used to prevent CSRF by accepting requests only from trusted sources. Some developers adopt the following basic designs without considering the possibility to use random tokens. If a request lacks ... 続きを読む
Monday, October 24, 2011 Stripping Referrer for fun and profit tldr: New methods for client side only (no server side script) referrer stripping in POST & GET requests. Code at the end. Referer is that tiny bit of information that browser sen... 続きを読む
August 2011 (7) July 2011 (3) June 2011 (5) May 2011 (10) April 2011 (8) March 2011 (13) February 2011 (7) January 2011 (2) November 2010 (2) October 2010 (2) September 2010 (6) August 2010 (2) July 2010 (3) June 2010 (4) May 2010 (3) April 2... 続きを読む
I’ve worked on the Internet Explorer team for six+ years, and on web sites for a decade longer, so I’m understandably excited when I come across a browser behavior I can’t explain. Last week, I encountered such a mystery, and it took me qu... 続きを読む
Cross posted from SANS ISC Not sure if you have seen our latest pet project – HTTP Headers. This is ISC’s effort to track HTTP response headers by major sites on the Internet. Our main goal at this point is to monitor the use of security re... 続きを読む
Charles is an HTTP proxy / HTTP monitor / Reverse Proxy that enables a developer to view all of the HTTP traffic between their machine and the Internet. This includes requests, responses and the HTTP headers (which contain the cookies and cac... 続きを読む
Introduction All data handling in Mozilla is based on the MIME type of the content. This means that every time an URI is loaded, Mozilla must find out its MIME type. The several ways how this happens are described in this document. Content-Ty... 続きを読む
[Docs] [txt|pdf] [Email] [Diff1] [Diff2] [Nits] Versions: 00 01 Network Working Group B. Hoehrmann Internet-Draft September 25, 2010 Expires: March 29, 2011 The application/www-form-urlencoded format draft-hoehrmann-urlencoded-01 Abstract Thi... 続きを読む
In every release of the browser, we make many major feature investments, most of which you can read about in posts over on the IEBlog. However, we also make thousands of small improvements that are often overlooked or not broadly recognized. ... 続きを読む
Firefox web browser - Faster, more secure & customizable Firefox 4開発版にHTTP Strict Transport Security (HSTS)の機能が実装された。HSTSはすでにChromeでは実装されていたセキュリティ機能。Firefox 4でデフォルトの機能として動作するようになる見通し... 続きを読む