Re: Various fnord patches
Peter Conrad <[email protected]> Thu, 22 Dec 2005 11:36:17 +0100
| Newsgroups | gmane.comp.web.fnord |
|---|---|
| Organization | [ t]ivano Software GmbH |
| Message-ID | <[email protected]> |
Hi, Am Donnerstag, 22. Dezember 2005 04:34 schrieb Felix von Leitner: > > This is a bug in ucspi-ssl. Adding the header does no harm, so I'll do > it anyway. [...] > Ouch. Fixed in CVS. [...] > OK. thanks. > > 5. Logging in case of Encoding: gzip > I do it like this on purpose, so you can see how many bytes you are > saving through gzip content encoding. I like my version better. But YMMV, of course. > > 6. Another potential request smuggling problem [...] > fnord does not support pipelining. AFAIK this is perfectly legal. I don't think so. RFC 2616 section 8.1.1 mentiones pipelining as one purpose of persistent connections. More specifically, section 8.1.2.2 says A client that supports persistent connections MAY "pipeline" its requests (i.e., send multiple requests without waiting for each response). A server MUST send its responses to those requests in the same order that the requests were received. Obviously, fnord violates that MUST (it sometimes skips answers). Bye, Peter -- Peter Conrad Tel: +49 6102 / 80 99 072 [ t]ivano Software GmbH Fax: +49 6102 / 80 99 071 Bahnhofstr. 18 http://www.tivano.de/ 63263 Neu-Isenburg Germany