Basic HTTP security R&D