> Perhaps it just needs a better name? Security-History ? Exploits-Fixed ? > I donno.
`Serial' is better because it's an opaque number. The other names you propose imply false meanings. BTW, this idea is great! I had propoed (several times) a "Last-critical-version:" header to achieve the same effect, but I think this is better because it allows for a measure of the "urgency"... (uhm.. but anyway.. is it different? perhaps 1 critical security fix is as critical as 2 security fixes).