W3C home > Mailing lists > Public > ietf-http-wg@w3.org > April to June 2007

Re: 305 Use Proxy deprecated?

From: Henrik Nordstrom <henrik@henriknordstrom.net>
Date: Fri, 15 Jun 2007 22:51:04 +0200
To: Adrien de Croy <adrien@qbik.com>
Cc: HTTP Working Group <ietf-http-wg@w3.org>
Message-Id: <1181940664.14935.18.camel@henriknordstrom.net>
fre 2007-06-15 klockan 17:16 +1200 skrev Adrien de Croy:

> can't find any browser that supports this.

I fail to find use cases where 305 makes much sense, and several
security concerns.

proxies is normally in the users administrative realm, while 305 is only
issued by origin servers (MUST NOT be issued by proxies..). This has
notable implications on authentication, making 305 a very odd case.

To me it simply doesn't make any practical sense. The normal redirects
suits those use cases where a server wants the request to be sent via
another server much better I think.

> So looks like the main browsers (haven't tried Safari) have de facto 
> deprecated it.

Yes. Or rather all browsers except Opera choose to ignore 305
completely.

Also I don't think there is many proxies implementing 305.

For 305 to work out the way it is designed it must be handled as a
hop-by-op operation, redirecting the last hop via the indicated proxy.
It should not go up to the user-agent if the user-agent is already using
a proxy.

Regards
Henrik

Received on Friday, 15 June 2007 20:51:17 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 27 April 2012 06:50:10 GMT