On Thu, Apr 9, 2026 at 5:12 PM Eric Covener <[email protected]> wrote:

> On Fri, Oct 17, 2025 at 4:54 PM Daniel Ferradal Márquez
> <[email protected]> wrote:
> >
> >
> > Hello,
> >
> > The other day I was checking CIS benchmark regarding apache httpd.
> >
> > Among some other old-fashioned recommendations I see they still
> > recommend dated directives like Limit or LimitExcept over
> > mod_allowmethods AllowMethods directive which they refer to secondarily
> > and as "experimental".
> >
> > Checking the docs, it still says Status: Experimental in:
> > https://httpd.apache.org/docs/2.4/mod/mod_allowmethods.html as well as
> > in trunk: https://httpd.apache.org/docs/trunk/mod/mod_allowmethods.html
> >
> > Is there a reason why it is stil refered to as experimental in the docs
> > and not just plainly the actual recommendation to set allowed methods in
> > Apache HTTPD actually?
>
> I agree we should drop experimental from it, any reasons to keep it?
>

Dropping it is the right move by now, yes.

Reply via email to