On Mar 7, 2009, at 1:25 PM, Tom Nichols wrote:
2. Also, shouldn't any valid URL respond to the OPTIONS method with an "Allow" header? i.e. I would expect OPTIONS /statuses/destroy/12345.json to return "Allow: POST, DELETE" Right? I attempted this (on a status ID that my user owns) and I got a "400 Bad Request" reply. Am I doing something wrong, or just something that isn't supported?
We block both the TRACE and OPTIONS method within our web servers for security reasons.
-john
