Interesting, but how many people building HTTP applications actually follow this diagram in full?
A disheartening percentage of the work we've put into Tinfoil Security's web vulnerability scanner involves dealing with websites that aren't to spec, and so break in unexpected ways.