Re: Host header checks and case sensitivity

On 12.12.2023 15:12, Mark Thomas wrote:
> Hi all,
>
> A (hopefully) quick question.
>
> In RFC 9112, section it states that:
>
> "If the target URI includes an authority component, then a client MUST
> send a field value for Host that is identical to that authority
> component..."
>
> Given that host is case insensitive, is the intention that "identical"
> in the text above means "identical, ignoring differences in case"?
>
> I can't think of any reason why this particular check needs to be case
> sensitive but wanted to check in case I was missing something.
> ...

The text seems to lack clarity here.

Are you concerned about client requirements, or do you want to add
strict checks to a server?

Best regards, Julian

Received on Tuesday, 12 December 2023 16:59:22 UTC