You've all heard of 301 and 302 redirects, but have you ever heard of a 307? I hadn't until today: Cross Domain Post Redirects.

I stumbled on this today when reading headers and session security, though it is only indirectly related to security.

307 was introduced in HTTP/1.1 as the MOVED (temporary redirect) response, the 302 response is (correctly) a FOUND response rather than a temporary redirect, though it performs the same function.

http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html

The use of the HTTP/1.0 302 as a redirect will (at some point) cease to be the norm but it will need for all user agent to be fully HTTP/1.1 enabled.