2 ms·
Very elaborate response. Thank you. I am aware that the way I phrased it was rather strict. The reason for this is that I'd agree that such a request should po
by sigdante 11y ago
Very elaborate response. Thank you.
I am aware that the way I phrased it was rather strict. The reason for this is that I'd agree that such a request should possibly not be discarded straight away but should also not be processed by the "queue"/configuration specified by the host field but should rather - being a HTTP 1.0 request - exclusively default to the standard host.
However Apache at least does not seem to agree on this and still processes 1.0 requests with a host field under/with the respective host configuration.
- dragonwriter 11y agoAn HTTP/1.0 server may recognize, and apply with its own semantics, non-standard headers. That flexibility is fairly key to the design of HTTP. So, Apache isn't wrong here. OTOH, a client can't expect that behavior with out-of-band information about server capabilities. So using the Host heater with HTTP 1.0 requests is a risky proposition.