Return-Path: X-Original-To: apmail-httpd-dev-archive@www.apache.org Delivered-To: apmail-httpd-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 3FB0491F3 for ; Fri, 16 Mar 2012 14:19:20 +0000 (UTC) Received: (qmail 91057 invoked by uid 500); 16 Mar 2012 14:19:19 -0000 Delivered-To: apmail-httpd-dev-archive@httpd.apache.org Received: (qmail 90983 invoked by uid 500); 16 Mar 2012 14:19:19 -0000 Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list dev@httpd.apache.org Received: (qmail 90971 invoked by uid 99); 16 Mar 2012 14:19:19 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Mar 2012 14:19:19 +0000 X-ASF-Spam-Status: No, hits=-0.7 required=5.0 tests=RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of covener@gmail.com designates 74.125.83.45 as permitted sender) Received: from [74.125.83.45] (HELO mail-ee0-f45.google.com) (74.125.83.45) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 16 Mar 2012 14:19:13 +0000 Received: by eeit10 with SMTP id t10so3011688eei.18 for ; Fri, 16 Mar 2012 07:18:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=pYlUIzoS3tlv+go9eibKaMORSb6iLblGgzDwEY8kpL0=; b=JlfZ19BuCAfocVbegNAN5s+BaowTXcf+2orJhgGa/jP2mIuXh2qXEyYTYdo+rkLZHl 5CoOjKNDhS7wSa+D92oGeP/rV8GgWcjkviywVFsawwmLyb2bALPomDR6/nNGiiHO9qOL u7x81EA4BE4WyAFCmxZHr+u2MHAQZiGMEk2CM3GuAvM+8dnsRF0e688cfMo4L25stsgL o0CJetTzPNASPia2luZtzkVAcLElWEE+jGzxdclwp7mRCkWiJi/UFnQGKKjLFNUo6oI+ LEYulsx/GQeTOShOas9Edp/bg0Bllo1OuGblfe8qJyo/T47Uad6Akf9jOPb1sXFvPvEG fw4Q== MIME-Version: 1.0 Received: by 10.50.47.230 with SMTP id g6mr2542658ign.74.1331907531340; Fri, 16 Mar 2012 07:18:51 -0700 (PDT) Received: by 10.50.89.167 with HTTP; Fri, 16 Mar 2012 07:18:51 -0700 (PDT) Date: Fri, 16 Mar 2012 10:18:51 -0400 Message-ID: Subject: TRACE still enabled by default From: Eric Covener To: dev@httpd.apache.org Content-Type: text/plain; charset=ISO-8859-1 X-Virus-Checked: Checked by ClamAV on apache.org We still enable TRACE by default. Is this useful enough to justify making every other poor sap with a security scanner have to manually turn it off? I'm hoping 2.4.x is early enough in life where flipping this wouldn't be too astonishing.