New HTTP header needed: Expect-CT

Eric Henson

• September 27, 2021 17:29

In order for my company to pass certain security exams, I need the following headers to be available from CerberusFTP:

Expect-CT: enforce, max-age=300,

Further reading:

A new security header: Expect-CT (scotthelme.co.uk)

draft-ietf-httpbis-expect-ct-02

0

• Official comment

  

  Ian Butteriss

  Product Support

  • September 27, 2021 17:48

  Thank you for the post, Eric. We have an existing enhancement request open for this and I have added you to it as interested in seeing it included in a future release of Cerberus.
• 

  Ian Butteriss

  Product Support

  • September 27, 2021 18:21

  FYI, I have some feedback for you. The "Expect-CT" header has been obsolete since June 2021 (See https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Expect-CT) and, as such, we no longer have plans on implementing it.

  2
• 

  Eric Henson

  • September 27, 2021 18:49

  Okay, I'll see if we can ignore this.

  0

Please sign in to leave a comment.