What is X-Forwarded-For and when can you trust it? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		What is X-Forwarded-For and when can you trust it? (httptoolkit.com)
		5 points by thunderbong 8 months ago \| hide \| past \| favorite \| 1 comment

OutOfHere 8 months ago [–]

In short, if I am not mistaken, in general only the rightmost IP in the list can be trusted because it is set by your web server. This is when running an application server which receives requests from your web server.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact