Am 10.04.26 um 02:51 schrieb Frank Gingras:
On Thu, Apr 9, 2026 at 5:12 PM Eric Covener <[email protected] <mailto:[email protected]>> wrote:On Fri, Oct 17, 2025 at 4:54 PM Daniel Ferradal Márquez <[email protected] <mailto:[email protected]>> wrote: > > > Hello, > > The other day I was checking CIS benchmark regarding apache httpd. > > Among some other old-fashioned recommendations I see they still > recommend dated directives like Limit or LimitExcept over > mod_allowmethods AllowMethods directive which they refer to secondarily > and as "experimental". > > Checking the docs, it still says Status: Experimental in: > https://httpd.apache.org/docs/2.4/mod/mod_allowmethods.html <https://httpd.apache.org/docs/2.4/mod/mod_allowmethods.html> as well as > in trunk: https://httpd.apache.org/docs/trunk/mod/ mod_allowmethods.html <https://httpd.apache.org/docs/trunk/mod/ mod_allowmethods.html> > > Is there a reason why it is stil refered to as experimental in the docs > and not just plainly the actual recommendation to set allowed methods in > Apache HTTPD actually? I agree we should drop experimental from it, any reasons to keep it? Dropping it is the right move by now, yes.
+1 to dropping "experimental". Best regards, Rainer
