On Mon, May 14, 2012 at 11:03 AM, Alan Holden <[email protected]> wrote:

>  To be sure, domains have always been case-insensitive. It's the paths,
> files and query strings we're talking about here, right?
>

Right, file names specifically since that's where the potential issues lie.

But I should *also* point out that my application does NOT rely on a lot of
> direct entry of urls by users. They are clicking on links embedded in
> sites, or using forms that pull code from my API.
>

Exactly, and I think that's true of most apps. In some specific cases on
our intranet I do have rewrite rules in place specifically for case
sensitivity issues where it matters, but as a rule if you're making a ton
of decisions based on thinking what people might type for the URL, from
that perspective it's not a big deal.

Until a malicious cracker decides to pick on you of course ...

If it were me, I wouldn't turn off case sensitivity because I think the
downside of leaving it on is largely imagined.

-- 
Matthew Woodward
[email protected]
http://blog.mattwoodward.com
identi.ca / Twitter: @mpwoodward

Please do not send me proprietary file formats such as Word, PowerPoint,
etc. as attachments.
http://www.gnu.org/philosophy/no-word-attachments.html

-- 
online documentation: http://openbd.org/manual/
   google+ hints/tips: https://plus.google.com/115990347459711259462
     http://groups.google.com/group/openbd?hl=en

Reply via email to