Whenever a UA receives a Valid Pinning Header, it MUST set its Pinning Metadata to the exact Pins, Effective Expiration Date (computed from max-age), and (if any) report-uri given in the most recently received Valid Pinning Header. (RFC 7469: Public Key Pinning Extension for HTTP)


Return to list of all ( HTTP Header Fields | Web Concepts )