HTTP Application Security BoF at IETF 78 in Maastricht http://is.gd/cBkgf discussing Media type sniffing, Origin header, STS