httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "William A. Rowe, Jr." <>
Subject Re: mod_deflate DoS using HEAD
Date Tue, 14 Jul 2009 19:18:32 GMT
Roy T. Fielding wrote:
> On Jul 14, 2009, at 10:02 AM, Nick Kew wrote:
>> That, on the other hand, stands.  In the case of an HTTP/1.0
>> request, we'd be closing the connection to signal end-of-response.
> Not on a HEAD request.

But on the GET request with the deflate filter installed, we would not
send a C-L but would close the connection upon transmission of the body,
so we can drop the pretense of querying the true C-L.

View raw message