Re: FW: Debian Bug#320585: sitecopy: should not use Depth: Infinity for DAV

Joe Orton <[email protected]> Sun, 31 Jul 2005 22:07:18 +0100
Newsgroups gmane.comp.web.sitecopy
Message-ID <[email protected]>
On Sat, Jul 30, 2005 at 12:23:54PM -0500, Reed Snellenberger wrote:
> When working in (at least) the --fetch mode, sitecopy issues a PROPFIND
> request with Depth: Infinity (presumably to get a complete file list in one
> request).  This results in a 403 Forbidden return from any attempt to issue
> a sitecopy --fetch for a new site.

This is fixed for the next version of sitecopy.
 
> However, the WebDAV working group has stated that Depth: Infinity PROPFIND
> requests shouldn't be issued by well-behaved client software, due to
> resource consumption issues and the possibility of DoSing a web server.  As

That's not actually accurate, I suspect you have misread the mod_dav web 
page. The statement of the WG ends at "it is acceptable for DAV servers 
to refuse these kinds of requests".  The "shouldn't be issued... " bit 
is the considered and of course highly respected opinion of a certain 
Mr. Greg Stein ;).  

My opinion differs really only in that I class this sitecopy issue more 
as a missing-feature than as a bug, but if I went back in time I would 
probably have never added fetch and synch mode to sitecopy in the first 
place, and I never use them myself anyway, so have had little motivation 
to fix this.

Regards,

joe
_______________________________________________
sitecopy maillist  -  [email protected]
http://dav.lyra.org/mailman/listinfo/sitecopy