[Arkadir]

I'm curious: with HTTPS, how does the firewall know that it's an OPTIONS request ?

[emeraldd]

By firewall, he would have to be talking about a client side firewall running on the machine making the request. Something that sees the request before it actually goes out on the wire.

[jlemoine]

You are right, I have tested it again and HTTPS is working since the firewall cannot decode headers.