httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Joshua Slive <>
Subject RE: [users@httpd] Recompiling Without HTTP TRACE
Date Wed, 03 Dec 2003 16:16:24 GMT

On Wed, 3 Dec 2003, Thomas George wrote:

> Joshua,
> It's not a choice I get to make.
> Our security group follows policies given to them by the federal government,
> and HTTP TRACE has been identified as a vulnerability; maybe they know
> something I don't...?

That's quite a vague reference to an imprecise authority.  I have a
feeling if you really tracked this down, you'd find you are making a

> Anyhow, I still would like to know if it's possible to turn it off during
> compilation, and how to do it.

Sure it's possible.  It involves doing some quantity of source-code
hacking.  And I wouldn't recommend it.

Is it possible to do it without hacking the source?  No.


The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:> for more info.
To unsubscribe, e-mail:
   "   from the digest:
For additional commands, e-mail:

View raw message