Based on the rewrite policy exhibit, which statement is true for the header insertion?

• A. HTTP Header "SSL_parameter: [e-mail]" will be inserted in every RESPONSE.
• B. HTTP Header "SSL_parameter: [e-mail]" will be inserted in every REQUEST.
• C. HTTP Header "SSL_parameter: C=IN, ST=KA, O=Mylab, CN=[e-mail]" will be inserted in every RESPONSE.
• D. HTTP Header "SSL_parameter: C=IN, ST=KA, O=Mylab, CN=[e-mail]" will be inserted in every REQUEST.

Answer: (D)

The header is meant to carry the client’s certificate identity to the backend, and that information is provided as part of the request path. In mutual TLS setups, the gateway can extract the client certificate’s subject Distinguished Name (DN) and place it in a header so the upstream server can make authorization decisions based on that identity. The full DN includes country, state, organization, and the common name, giving a precise identity like C=IN, ST=KA, O=Mylab, CN=[e-mail]. This header is inserted with every request the gateway forwards to the backend, not in responses back to the client. Using the full DN provides richer identity information than just the CN, and inserting it into responses would expose certificate details and isn’t how this policy typically propagates identity.