httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ben Laurie <...@gonzo.ben.algroup.co.uk>
Subject Re: WWW Form Bug Report: "ContentDigest not documented" on Solaris 2.x (fwd)
Date Sat, 28 Dec 1996 20:03:20 GMT
Alexei Kosut wrote:
> 
> On Sat, 28 Dec 1996, ldl@cs.utah.edu wrote:
> 
> > just don't see any documentation on the ContentDigest
> > core module directive at
> > <http://www.apache.org/docs/mod/directives.html>.
> > no big deal of course but just thought with
> > the push to get 1.2 non-beta the docs tree may
> > want to get polished just that much more ;-)
> 
> The ContentDigest directive is undocumented, and will likely stay that
> way. It's a proof-of-concept feature, that was implemented when the
> MD5 code was added to Apache, but not intended for mass
> consumption. Although as far as we know it works fine, it has not been
> in any way tested, nor do we guarantee that it will work or continue
> to be present in future versions of Apache.

Its also worth noting that ContentDigest as it stands does not defend against
replay attacks.

Cheers,

Ben.

-- 
Ben Laurie                Phone: +44 (181) 994 6435  Email: ben@algroup.co.uk
Freelance Consultant and  Fax:   +44 (181) 994 6472
Technical Director        URL: http://www.algroup.co.uk/Apache-SSL
A.L. Digital Ltd,         Apache Group member (http://www.apache.org)
London, England.          Apache-SSL author

Mime
View raw message