Thursday 19 January 2017

why 'Authorization' header is special ?

  Authorization headers are recognized and specially treated by HTTP
   proxies and servers.  Thus, the usage of such headers for sending
   access tokens to resource servers reduces the likelihood of leakage
   or unintended storage of authenticated requests in general, and
   especially Authorization headers.

https://tools.ietf.org/html/rfc6819#section-5.4.1