This Internet-Draft is no longer active. Unofficial copies of old Internet-Drafts can be found here:
http://tools.ietf.org/id/draft-ietf-websec-frame-options.
Abstract:
To improve the protection of web applications against Clickjacking
this standards defines a http response header that declares a policy
communicated from a host to the client browser whether the
transmitted content MUST NOT be displayed in frames of other pages
from different origins which are allowed to frame the content.
Authors:
David Ross
Tobias Gondrom <tobias.gondrom@gondrom.org>
(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid)
datatracker.ietf.org