Proposal: Move X_Forwarded_Proto To HTTPRequestHeaderFieldsType

Status: Closed
Comment Period Closes: 12/17/2013
Affects Backwards Compatibility: YES
Relevant Issue: https://github.com/CybOXProject/schemas/issues/99

Background Information

CybOX 2.0.1 defines an X_Forwarded_Proto field in HTTPResponseHeaderFieldsType. This header field is not found in HTTP response headers and is only found in HTTP request headers.

Proposal

We propose moving the X_Forwarded_Proto field to HTTPRequestHeaderFieldsType within the HTTP Session Object schema. The following XML element will be moved, unmodified, from HTTPResponseHeaderFieldsType to HTTPRequestHeaderFieldsType:

<xs:element minOccurs="0" name="X_Forwarded_Proto" type="cyboxCommon:StringObjectPropertyType">
  <xs:annotation>
    <xs:documentation>The X-Forwarded-Proto field specifies the non-standard HTTP Response X-Forwarded-Proto field, which identifies the originating protocol of an HTTP request.</xs:documentation>
  </xs:annotation>
</xs:element>

Impact

Existing CybOX 2.0.1 content that makes use of the X_Forwarded_Proto field found within the HTTPResponseHeaderFieldsType will not validate against proposed schema changes. Because the field does not represent an actual HTTP response header field, there should be minimal, if any, content that makes use of the field. As such, the impact should be minimal.

Requested Feedback

1. Are CybOX authors and consumers comfortable with breaking backwards compatibility with this change?