Re: User confirmation and 307 redirects

On Thu, Aug 19, 2010 at 2:32 PM, Julian Reschke <julian.reschke@gmx.de> wrote:
> On 19.08.2010 19:29, Adam Barth wrote:
>>> Question for clarification: what kind of unsafe methods would you expect
>>> that unit to make?
>>
>> POST requests, e.g., to send traffic data to the server.
>
> So, in this use case, why does the redirect happen in the first place?
> Server handling the traffic data moved?

There are any number of reasons the traffic server might return a
redirect.  For example, suppose the main traffic server is overloaded
and wants to offload the processing of this request to another server
(say in a different datacenter) temporarily.

Even though the in-car navigation unit has a user interface, it's
definitely wrong to make the user confirm this redirect.  The user is
busy driving!

Adam