> But Brave has a backdoor! > No it doesn't. Brave is open source and there has been no backdoor ever found. Many people claim that Brave being able to use cus

> But Brave has a backdoor! > No it doesn't. Brave is open source and there has been no backdoor ever found. Many people claim that Brave being able to use custom HTTP headers are a backdoor but this isn't true. HTTP headers are allowed as per RFC 7231. See Brendan Eich's response to this. This has got to be a joke, right? Nobody's claiming that Brave 'using custom HTTP headers' is not allowed in the HTTP spec, the problem is that Brave downloads a list of headers to inject into requests for specific websites. I'm not sure I'd call this a "backdoor", but considering it cannot (to my knowledge) be disabled it at least deserves a conversation. Trying to minimize the complaint with "it's allowed in the HTTP spec" is insane.