On 03/06/2017 04:21 PM, Martin Thomson wrote: > I don't mean as anything. The question is simply whether it does or > not. It might make it easier to construct a valid response, though > I'm not sure that has reads on the ability of an attacker to generate > a valid response given the challenge structure. No, the server is not defined to send a Referer header. I think it's not needed.
_______________________________________________ Acme mailing list [email protected] https://www.ietf.org/mailman/listinfo/acme
