Return-Path: X-Original-To: apmail-httpd-dev-archive@www.apache.org Delivered-To: apmail-httpd-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 2EF70912F for ; Wed, 21 Mar 2012 20:02:37 +0000 (UTC) Received: (qmail 95199 invoked by uid 500); 21 Mar 2012 20:02:36 -0000 Delivered-To: apmail-httpd-dev-archive@httpd.apache.org Received: (qmail 95138 invoked by uid 500); 21 Mar 2012 20:02:36 -0000 Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list dev@httpd.apache.org Received: (qmail 95130 invoked by uid 99); 21 Mar 2012 20:02:36 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 21 Mar 2012 20:02:36 +0000 X-ASF-Spam-Status: No, hits=-0.7 required=5.0 tests=RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of gstein@gmail.com designates 209.85.220.173 as permitted sender) Received: from [209.85.220.173] (HELO mail-vx0-f173.google.com) (209.85.220.173) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 21 Mar 2012 20:02:30 +0000 Received: by vcbfl11 with SMTP id fl11so1956721vcb.18 for ; Wed, 21 Mar 2012 13:02:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; bh=e6XcVs8POB04KUehg6QlHtybcrOsaObmH7Hk8ukkCac=; b=E+XYrOfo/jf5PW3jmzVirw8QOcMS7PeuE6FFCVO0bEjn2V3n+N19cQ0F4a2Shw2pc9 z3u0nWrOKgstZs+E1VU471V3WlZvpAyNVbv9GlCb4WMWB1GiKXWC9JR2XKj56Oe7sJwX FPsTK+mqQsE2fueKnCRZdfLcOg7ZxgCa2uMpWXn/G0vowVSvtfRcMAOa158YrpebnoD6 1OKsch7OmKQZRd9T9OxFGkbLFHtc4XQzDBRwvn0XMi0Lij+IAcoUFppI66QliuF+Ngau F0yUTE6+IKiSsWab8p1gpT+7w4iZNuZSZGJ6xsi3XQsk/z3Kcmj1D2uV/JtfN3FLTiYa B/hQ== MIME-Version: 1.0 Received: by 10.220.150.14 with SMTP id w14mr2448263vcv.59.1332360129290; Wed, 21 Mar 2012 13:02:09 -0700 (PDT) Received: by 10.220.150.69 with HTTP; Wed, 21 Mar 2012 13:02:09 -0700 (PDT) In-Reply-To: <4F6A3304.6070802@catseye.org> References: <201203202004.31796.sf@sfritsch.de> <10EBFF04-E21C-4BE2-8373-9335CC4FAC4E@jaguNET.com> <74E8D133-C719-4DA9-8E3D-2F0D95D29AE5@gbiv.com> <4F6A3304.6070802@catseye.org> Date: Wed, 21 Mar 2012 16:02:09 -0400 Message-ID: Subject: Re: TRACE still enabled by default From: Greg Stein To: dev@httpd.apache.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Virus-Checked: Checked by ClamAV on apache.org On Wed, Mar 21, 2012 at 15:59, Mark Montague wrote: > On March 21, 2012 15:33 , "Roy T. Fielding" wrote: >> >> TRACE won't work at all if the most popular end-point doesn't support it= . > > Why would this be a bad thing? =A0Or, to phrase it another way, what are = the > situations in which it is desirable that TRACE be already-enabled on a we= b > server as opposed to having the owner of the web server enable the TRACE > method in response to a specific debugging need? Roy means that if we don't set the precedent for TRACE being present and how it is supposed to work, then nobody else will. The Apache HTTP server is effectively the embodiment and leader of the HTTP specification. Cheers, -g