SlyMcFly
SlyMcFly

Reputation: 245

Can referer header be trusted when using https?

I understand that the referer header is trivial to spoof when using standard http. But when using https can you trust the referer or is that potentially faked as well?

Upvotes: 4

Views: 353

Answers (1)

user149341
user149341

Reputation:

No. Using HTTPS changes nothing; the referer can still trivially be spoofed; for example:

wget --referer=http://whitehouse.gov/ https://example.com/

Upvotes: 6

Related Questions