On Mar 22, 2012, at 11:07 AM, Tom Evans wrote: > On Wed, Mar 21, 2012 at 7:33 PM, Roy T. Fielding <[email protected]> wrote: >> TRACE won't work at all if the most popular end-point doesn't support it. >> >> If folks want to protect clients (including gateways) against their own >> stupidity regarding what they choose to send in a TRACE request, then >> do so by selectively removing some lines from the response and I will >> try to update the standard accordingly. >> >> Turning it off by default is not an option. I will veto that. >> >> ....Roy > > How about providing a simpler way of turning it off, rather than > turning it off by default? Arbitrarily, it seems, you can't use Limit > or LimitExcept to restrict it, and instead have to use a RewriteRule. >
Simpler than 'TraceEnable off' ??
