Re: Redirection MUST NOTs

On Tue, 4 Nov 2003, Mark Baker wrote:

>
> On Tue, Nov 04, 2003 at 10:44:26PM +0100, Joris Dobbelsteen wrote:
> > Still, I'm interested in a (practical) sitiation where one needs to redirect
> > a non-GET/HEAD request?
>
> When the user agent trusts the server as it would a proxy, e.g.
>
> POST http://auth1.example.org/proxy?uri=http://auth2.example.org/some-path/ HTTP/1.1
> Host: auth1.example.org
> ...
>
> There, the server is providing proxy-like capabilities, but in gateway
> form.

Even so: a) The user did not choose this proxy trust relationship
         b) The user-agent has no way to discern this request from any
            other POST request in the proposed change you have
            described.

Received on Wednesday, 5 November 2003 12:37:08 UTC