12 ms·
> What you cannot do is dictate how my server responds to your request. The client is under no obligation to be truthful in its communications with a server. S
by SpaghettiCthulu 2y ago
> What you cannot do is dictate how my server responds to your request.
The client is under no obligation to be truthful in its communications with a server. Spoofing a User-Agent doesn't "dictate" anything. Your server dictates how it responds all on its own when it discriminates against some User-Agents.
- Too 2y agoWith enough sophistication and bad intent, at some point being untruthful to a server falls under computer intrusion laws, eg using a password that is not yours. I don't believe spoofing user agent would be determinant for any such case though. Even redistributing secret material you found on an accidentally open S3 bucket, without spoofing UA, could be considered intrusion if it was obvious the material was intended to be secret and you acted with bad intent.