Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Date: Wed, 3 Dec 2003 11:16:24 -0500 (Est)
From: Joshua Slive <joshua@slive.ca>
To: users@httpd.apache.org
In-Reply-To: <002201c3b9b7$17d11d00$6400000a@seoman>
Message-ID: <Pine.WNT.4.58.0312031113560.1444@Poste3947.hec.ca>
References: <002201c3b9b7$17d11d00$6400000a@seoman>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Subject: RE: [users@httpd] Recompiling Without HTTP TRACE


On Wed, 3 Dec 2003, Thomas George wrote:

> Joshua,
>
> It's not a choice I get to make.
>
> Our security group follows policies given to them by the federal government,
> and HTTP TRACE has been identified as a vulnerability; maybe they know
> something I don't...?

That's quite a vague reference to an imprecise authority.  I have a
feeling if you really tracked this down, you'd find you are making a
mistake.

> Anyhow, I still would like to know if it's possible to turn it off during
> compilation, and how to do it.

Sure it's possible.  It involves doing some quantity of source-code
hacking.  And I wouldn't recommend it.

Is it possible to do it without hacking the source?  No.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org