W3C home > Mailing lists > Public > ietf-http-wg@w3.org > April to June 2009

Re: HTTP/1.1 CONNECT request without Host header

From: Roy T. Fielding <fielding@gbiv.com>
Date: Tue, 16 Jun 2009 17:07:29 -0700
Message-Id: <AC39CC88-2B2F-41F2-B69E-5DF02A3F0E5E@gbiv.com>
Cc: HTTP Working Group <ietf-http-wg@w3.org>
To: Adrien de Croy <adrien@qbik.com>
On Jun 16, 2009, at 3:26 PM, Adrien de Croy wrote:

> I recently updated our proxy to reject all HTTP/1.1 messages from  
> clients that lack a Host header.
>
> This has been found to break a number of clients which use the  
> CONNECT method.

What clients?

> So it's going to be a necessity to relax this particular  
> requirement (in our proxy) at least for CONNECT.

Unlikely.  Apache always responds to such a request with 400.
AFAIK, all the other origin servers do as well, so even if the
request is passed by your proxy it is going to fail on the origin.

....Roy
Received on Wednesday, 17 June 2009 00:08:05 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 27 April 2012 06:51:04 GMT