Common use of Other non-SSL/TLS Related Response Headers Clause in Contracts

Other non-SSL/TLS Related Response Headers. There are several HTTP response headers that increase security, but that do not relate to SSL/TLS. Examples focus on preventing cross-site interaction that can be insecure, such as through frames (the X-Frame-Options header [Xxxx et al. 2015]*) and scripting (the X-WebKit-CSP header [W3C 2015]*). These response headers were excluded from the survey both due to limited time, and because they have not (yet) been accepted as standards (X-WebKit- CSP) or have been obsoleted without a replacement being available (X-Frame-Options).

Other non-SSL/TLS Related Response Headers. There are several HTTP response headers that increase security, but that do not relate to SSL/TLS. Examples focus on preventing cross-site interaction that can be insecure, such as through frames (the X-Frame-Options header [Xxxx Ross et al. 2015]*) and scripting (the X-WebKit-CSP header [W3C 2015]*). These response headers were excluded from the survey both due to limited time, and because they have not (yet) been accepted as standards (X-WebKit- CSP) or have been obsoleted without a replacement being available (X-Frame-Options).