Say you have a reverse proxy server in front of your web server. If you do a
trace to the reverse proxy server that would execute the trace on the web
server revealing that information. 

-MJ

> -----Original Message-----
> From: André Malo [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, January 23, 2003 10:42 AM
> To: [EMAIL PROTECTED]
> Subject: Re: RFC TRACE
> 
> 
> * Johnson, Michael wrote:
> 
> > I would guess some error message should be displayed. 
> Forbidden/ Method not
> > allowed?
> 
> By the nature of TRACE I don't see that it would make much 
> sense for an 
> origin server.
> For a (mod_)proxy a 405 may be useful for security reasons.
> 
> YMMV.
> 
> nd
> -- 
> my @japh = (sub{q~Just~},sub{q~Another~},sub{q~Perl~},sub{q~Hacker~});
> my $japh = q[sub japh { }]; print join       #########################
>  [ $japh =~ /{(.)}/] -> [0] => map $_ -> ()  #            André Malo #
> => @japh;                                    # http://www.perlig.de/ #
> 

Reply via email to