Foundations
HTTP Header
Also: header
A Name: value line in a request or reply that describes it, such as who is asking or what type of content follows.
In more detail
Headers such as Cookie and Authorization carry proof of identity, so anyone who obtains the value can act as that user. Logs that record full headers record those secrets. Text in reply headers is untrusted input, including to AI agents that read it.