# Challenge anything with HTTP/1.1 that claims to be a browser
  - name: challenge-lies-browser-but-http-1.1
    action: CHALLENGE
    expression:
      all:
      - '"X-Http-Version" in headers'
      - headers["X-Http-Version"] == "HTTP/1.1"
      - '"X-Forwarded-Proto" in headers'
      - headers["X-Forwarded-Proto"] == "https"
      - userAgent.isBrowserLike()