httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject [Bug 53845] New: Remove DNT settings from httpd.conf
Date Sat, 08 Sep 2012 16:41:30 GMT
https://issues.apache.org/bugzilla/show_bug.cgi?id=53845

          Priority: P2
            Bug ID: 53845
          Assignee: bugs@httpd.apache.org
           Summary: Remove DNT settings from httpd.conf
          Severity: normal
    Classification: Unclassified
                OS: All
          Reporter: post@wickenrode.com
          Hardware: All
            Status: NEW
           Version: 2.4.3
         Component: Runtime Config
           Product: Apache httpd-2

SVN commit 1371878 added this section to the default httpd.conf.in:

# Deal with user agents that deliberately violate open standards
#
<IfModule setenvif_module>
BrowserMatch "MSIE 10.0;" bad_DNT
</IfModule>
<IfModule headers_module>
RequestHeader unset DNT env=bad_DNT
</IfModule>

As expressed in the comments on
https://github.com/apache/httpd/commit/a381ff35fa4d50a5f7b9f64300dfd98859dee8d0
this is regarded exclusively as a bad idea, beacuse:

* Apache is the wrong point to add this setting. DNT does only matter for a
very small subset of servers (ie those of ad agencies) so this will 1) result
in unnecessary processing for most installations and 2) The DNT header will
only be processed at a higher level (eg. PHP) where this check could be made.
With this setting Apache is 'stealing' information from the actual processing
logic that will handle the DNT header.
* This is damaging to the reputation of the Apache project as it shows people
hiding their personal political agenda in open source software (German
publisher Heise is already reporting about this)
* Using this settings would mean also people who explicitly decided the use DNT
will be ignored which is a much worse case than using the DNT setting from
people who don't care
* Whether DNT should default to 0 or 1 [let's face it: there will always be a
default unless you require the user to set this on first launch of the browser
with only the buttons "Enable", "Disable" and "Quit Browser" - which will not
happen] is something to decide by the specification, not by Apache.

* Unlike what the comment says IE10 actually asks the user about DNT when
Windows 8 is installed (as shown in the linked thread above), making the point
of this commit invalid

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message