Re: [#95] Multiple Content-Lengths

On 15/10/2010, at 5:58 PM, Julian Reschke wrote:
>>> 
>>> "If this is a response message received by a user-agent, it SHOULD be treated as an error by discarding the message and closing the connection."
>>> 
>>> (<http://trac.tools.ietf.org/wg/httpbis/trac/changeset/1031>)
>> 
>> Is there a reason for this to be a SHOULD instead of a MUST? I know Adam already asked that, but I don't recall seeing an answer.
> 
> We can't simply break formerly-conforming implementations.

We can if it's a security issue.


> What's important is IMHO that the problem is explained, and that we advise implementations what do to. Which keyword we use is unlikely to have a big effect on what implementations will do in practice.


I tend to agree, SHOULD vs. MUST here isn't worth a tremendous amount of time. However, if we get agreement among UA implementers on MUST, that does seem the way to go.

Julian, have you put in any text about duplicate content-length values yet?

Regards,


--
Mark Nottingham   http://www.mnot.net/

Received on Monday, 18 October 2010 03:17:42 UTC