CRLF is a security hole. I've actually seen this happen. Proxy interprets line ending one way, like CR CRLF as CRLF CRLF and ignores body. Server sees CRCRLF an

CRLF is a security hole. I've actually seen this happen. Proxy interprets line ending one way, like CR CRLF as CRLF CRLF and ignores body. Server sees CRCRLF and treats it as CRLF, reads proxy-ignored bits as headers. "Oops." Though this is more of an artifact of terrible specs and the IETF's silly love affair with "free" text formats. They actually take delight in showing off how crazy the encoding can be.