3 ms·
If you excuse some speculation: (clarifications appreciated of course.) If i remember correctly, ages ago (Windows Server 2003?) Microsoft introduced in-kernel
by hgo 3y ago
If you excuse some speculation:
(clarifications appreciated of course.)
If i remember correctly, ages ago (Windows Server 2003?) Microsoft introduced in-kernel HTTP-handling for the IIS web-server. I think it was for performance improvements with less copying between kernel- and user-space memory.
I suspect the for me unknown WinHTTP apis mentioned here could use these optimizations? Maybe that's why they mention security requirements? (Which would obviously be needed when doing parsing in the kernel.)
- genocidicbunny 3y agoThe security requirements are more due to trying to keep nasty things from being downloaded in the context of a game running on the Xbox. Games tend to run at fairly high privilege levels on Xbox, so Microsoft is probably worried mainly about jailbreaks.
- teh_klev 3y agoThe thing you're thinking about is http.sys and it was introduced in Windows 2008/IIS7 to support the new "Integrated Mode" request pipeline. WinHTTP doesn't have anything to do with http.sys it just listens for HTTP requests and then hands them off to the right bits inside IIS. WinHTTP is essentially a HTTP stack for client services running on Windows Server to allow them to make HTTP requests. It has a sibling API named WinINet which is aimed at use in desktop environments. I think the threading models are main differentiator (I been a while since I looked at this). WinHTTP is fairly well documented: https://learn.microsoft.com/en-us/windows/win32/winhttp/about-winhttp https://learn.microsoft.com/en-us/windows/win32/winhttp/abou...