Am 22.03.2012 16:17, schrieb Tom Evans: > On Thu, Mar 22, 2012 at 3:15 PM, Eric Covener <cove...@gmail.com> wrote: >>> How about providing a simpler way of turning it off, rather than >>> turning it off by default? Arbitrarily, it seems, you can't use Limit >>> or LimitExcept to restrict it, and instead have to use a RewriteRule. >>> >> >> We've had TraceEnable for a while: >> http://httpd.apache.org/docs/2.2/mod/core.html#traceenable > > Now I hide in shame :/
the whole discussion is about exactly this option which defaults to ON and most people do even not know that TRACE exists at all even after reading over years many many articles about server-hardening
signature.asc
Description: OpenPGP digital signature
