W3C home > Mailing lists > Public > ietf-http-wg@w3.org > October to December 2007

Re: NEW ISSUE: Transfer-Encoding in 1.0 messages

From: Bjoern Hoehrmann <derhoermi@gmx.net>
Date: Fri, 23 Nov 2007 11:20:07 +0100
To: Henrik Nordstrom <henrik@henriknordstrom.net>
Cc: ietf-http-wg@w3.org
Message-ID: <67adk3dogu1j8hb6cntebureaipdf7vp53@hive.bjoern.hoehrmann.de>

* Henrik Nordstrom wrote:
>Who is sending transfer-encoding in HTTP/1.0 messages? Have never seen
>that, and quite outside specifications.
>I have seen transfer-encoding in response to HTTP/1.0 requests however,
>even if that is a MUST NOT..

I do not know any current setup that would cause this, and that browsers
do not agree how to handle this is a good hint that there are none. What
I can easily imagine though is that in ancient times broken servers with
broken proxies would cause this, and that exploits might try to use this
to bypass crude security measures.
Björn Höhrmann · mailto:bjoern@hoehrmann.de · http://bjoern.hoehrmann.de
Weinh. Str. 22 · Telefon: +49(0)621/4309674 · http://www.bjoernsworld.de
68309 Mannheim · PGP Pub. KeyID: 0xA4357E78 · http://www.websitedev.de/ 
Received on Friday, 23 November 2007 10:20:23 UTC

This archive was generated by hypermail 2.3.1 : Thursday, 1 October 2015 05:36:25 UTC