Hacker News new | ask | show | jobs
by sp332 1561 days ago
That has all the problems listed. The header could be modified or the response blocked by anyone who could modify or block the plain HTTP(S) response.