Web access lists and http 1.1 ?

I've been looking into this "forwarded by ... for ... " header business
with the proposed http 1.1 standard.

How will web server access list security be done if clients come through
a http 1.1 cache?

We make extensive use of domain name security and IP address security on
our web servers. I know these can be fairly easily spoofed, but it gives
a reasonable amount of security for minimum mucking about.

Any thoughts?

Steve Green
CSIRO
Australia
Received on Wed Nov 27 1996 - 21:21:31 MST