https://issues.apache.org/bugzilla/show_bug.cgi?id=53845
Priority: P2
Bug ID: 53845
Assignee: [email protected]
Summary: Remove DNT settings from httpd.conf
Severity: normal
Classification: Unclassified
OS: All
Reporter: [email protected]
Hardware: All
Status: NEW
Version: 2.4.3
Component: Runtime Config
Product: Apache httpd-2
SVN commit 1371878 added this section to the default httpd.conf.in:
# Deal with user agents that deliberately violate open standards
#
<IfModule setenvif_module>
BrowserMatch "MSIE 10.0;" bad_DNT
</IfModule>
<IfModule headers_module>
RequestHeader unset DNT env=bad_DNT
</IfModule>
As expressed in the comments on
https://github.com/apache/httpd/commit/a381ff35fa4d50a5f7b9f64300dfd98859dee8d0
this is regarded exclusively as a bad idea, beacuse:
* Apache is the wrong point to add this setting. DNT does only matter for a
very small subset of servers (ie those of ad agencies) so this will 1) result
in unnecessary processing for most installations and 2) The DNT header will
only be processed at a higher level (eg. PHP) where this check could be made.
With this setting Apache is 'stealing' information from the actual processing
logic that will handle the DNT header.
* This is damaging to the reputation of the Apache project as it shows people
hiding their personal political agenda in open source software (German
publisher Heise is already reporting about this)
* Using this settings would mean also people who explicitly decided the use DNT
will be ignored which is a much worse case than using the DNT setting from
people who don't care
* Whether DNT should default to 0 or 1 [let's face it: there will always be a
default unless you require the user to set this on first launch of the browser
with only the buttons "Enable", "Disable" and "Quit Browser" - which will not
happen] is something to decide by the specification, not by Apache.
* Unlike what the comment says IE10 actually asks the user about DNT when
Windows 8 is installed (as shown in the linked thread above), making the point
of this commit invalid
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
