This standard defines the mandatory procedures for configuring request filtering on all outbound proxy gateways. Failure to comply is a critical security violation.
All domains must be explicitly whitelisted. Wildcards are only permitted for subdomains of verified internal services.
The proxy must strip all identifying headers that are not strictly required for the transaction.
User-Agent should be normalized.