httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Reindl Harald <h.rei...@thelounge.net>
Subject Re: TRACE still enabled by default
Date Thu, 22 Mar 2012 15:19:42 GMT


Am 22.03.2012 16:17, schrieb Tom Evans:
> On Thu, Mar 22, 2012 at 3:15 PM, Eric Covener <covener@gmail.com> wrote:
>>> How about providing a simpler way of turning it off, rather than
>>> turning it off by default? Arbitrarily, it seems, you can't use Limit
>>> or LimitExcept to restrict it, and instead have to use a RewriteRule.
>>>
>>
>> We've had TraceEnable for a while:
>> http://httpd.apache.org/docs/2.2/mod/core.html#traceenable
> 
> Now I hide in shame :/

the whole discussion is about exactly this option
which defaults to ON and most people do even not
know that TRACE exists at all even after reading
over years many many articles about server-hardening


Mime
View raw message