From owner-freebsd-security Fri Nov 20 12:00:52 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id MAA09629 for freebsd-security-outgoing; Fri, 20 Nov 1998 12:00:52 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from smtp03.wxs.nl (smtp03.wxs.nl [195.121.6.37]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id MAA09624 for ; Fri, 20 Nov 1998 12:00:49 -0800 (PST) (envelope-from asmodai@wxs.nl) Received: from chronias.ninth-circle.org ([195.121.58.47]) by smtp03.wxs.nl (Netscape Messaging Server 3.6) with ESMTP id AAA7133; Fri, 20 Nov 1998 21:00:18 +0100 Message-ID: X-Mailer: XFMail 1.3 [p0] on FreeBSD X-Priority: 3 (Normal) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <199811201926.LAA18418@apollo.backplane.com> Date: Fri, 20 Nov 1998 21:05:07 +0100 (CET) Organization: Ninth Circle Enterprises From: Jeroen Ruigrok/Asmodai To: Matthew Dillon Subject: Re: pkhttpd (Was: Would this make FreeBSD more secure?) Cc: Per Kristian Hove , freebsd-security@FreeBSD.ORG, Andrew McNaughton Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On 20-Nov-98 Matthew Dillon wrote: >:The 1.1 extensions are less important for simple web servers, but are >:important if you're setting up a proxy server. > > 1.1 is fairly important for both, because not only does 1.1 hack, er, > 'fix' > the persistent connection protocol, it also requires the Host: header (1) > so as clients conform to 1.1, the server is guarenteed the ability to > determine the virtual host from the Host: header rather then having to > assign unique IP's to each virtual host. > > note(1): the server is required to return a failure code if the client > says it is using HTTP/1.1 but does not supply a Host: mime header. OK, that's all cute ;) But how big would a fully functional HTTP 1.0 or 1.1 compliant server be? Because for embedded systems (read picoBSD) we need to make such decisions and based on the results implement them. *digs out the RFC specs...* --- Jeroen Ruigrok van der Werven/Asmodai asmodai(at)wxs.nl | Cum angelis et pueris, Junior Network/Security Specialist | fideles inveniamur *BSD & picoBSD: The Power to Serve... To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message