Solved

HTTP Header - Hiding Sizing Information

Posted on 2007-03-30
2
225 Views
Last Modified: 2010-04-16
I'm doing some data hiding stuff.  I need to hide sizing information in an HTTP header.  When  I say sizing information, I mean an integer value ranging from 1 to 100,000.  My current HTTP header is very basic.  It has the following parameters set:

Accept
Accept-Language
Accept-Encoding
User Agent
Host
Set Cookie
Date
Content-type
Content Legnth
Connection

How can a I manipulate the HTTP header so that I'm hiding the sizing information (an integer value) and if the lheader is examined, noone will know?  I know I can't do that with Content-length cuz that gets automatically computed.
0
Comment
Question by:lcor
2 Comments
 
LVL 5

Accepted Solution

by:
NickVd earned 250 total points
ID: 18825414
I don't believe you'll be able to hide it perfectly.  Your best option would be adding an X_SOMETHING header (X_...) being user-added headers.  You'd probably want to somehow encrypt the value to upon a quick glance, you won't see anything important.
0
 
LVL 1

Assisted Solution

by:_stab_
_stab_ earned 250 total points
ID: 18828658
you can try apache module mod_headers, it might help
this module should be able to manipulate http request/response headers
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article is meant to give a basic understanding of how to use R Sweave as a way to merge LaTeX and R code seamlessly into one presentable document.
These days, all we hear about hacktivists took down so and so websites and retrieved thousands of user’s data. One of the techniques to get unauthorized access to database is by performing SQL injection. This article is quite lengthy which gives bas…
Learn how to set-up custom confirmation messages to users who complete your Wufoo form. Include inputs from fields in your form, webpage redirects, and more with Wufoo’s confirmation options.
In this fourth video of the Xpdf series, we discuss and demonstrate the PDFinfo utility, which retrieves the contents of a PDF's Info Dictionary, as well as some other information, including the page count. We show how to isolate the page count in a…

948 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now