Security and Insecurity of HTTP Headers

Explore the security implications of HTTP headers in this 49-minute conference talk from AppSecEU 2015 in Amsterdam. Delve into Dirk Wetter's presentation on "Security And Insecurity Of HTTP Headers," examining both protective measures and potential vulnerabilities. Learn about the critical role of HTTP headers in web application security, common misconfigurations, and best practices for implementation. Note that audio begins around the 3-minute mark. Access additional conference videos through the provided FH Münster link, and discover more resources from the OWASP Media Project.