Re: [Unbearable] Dealing with header injection through reverse proxies

[Leif Johansson <[e-mail]>]

> Having said that, this is something that I definitely want to see
> done, regardless of whether it's the right solution for this
> particular issue or not.

With my chair hat on I'll note that this threat is sent to both
the tokbind list and the http WG list

I am however working on the assumption that if a general solution
for protection against header injection turns up it will probably
not get done in this WG

I also think it is up to the WG to decide if we want to depend
on such a solution or stick to Brians approach of saying "you
MUST have solution" in the security considerations section (and
potentially dealing with an IESG DISCUSS at a later stage).

	Cheers Leif