A method, system, and computer program product for exchanging supplemental
information fields between a client and server. This supplemental
information can then be used by the server to complete a client's request
for content stored at a particular location. For example, the supplemental
information may be used to provide a customized response, or for access
control to sensitive data. Preferably, the REDIRECT message of the
Hypertext Transfer Protocol (HTTP) or the Wireless Session Protocol (WSP)
is used to request the supplemental information, encoding a
comma-separated list of attribute names in a request header for the
desired supplemental information. This solution is designed to be
backward-compatible.