Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 12 Jan 2009 23:00:03 GMT
From:      "Philip M. Gollucci" <pgollucci@freebsd.org>
To:        apache@FreeBSD.org
Subject:   Re: ports/130179: [PATCH] www/apache22: Enable passing HTTP 'Authorization' headers as compile time option
Message-ID:  <200901122300.n0CN03bS038681@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help
The following reply was made to PR ports/130179; it has been noted by GNATS.

From: "Philip M. Gollucci" <pgollucci@freebsd.org>
To: bug-followup@FreeBSD.org, wens@csie.org
Cc:  
Subject: Re: ports/130179: [PATCH] www/apache22: Enable passing HTTP 'Authorization'
 headers as compile time option
Date: Mon, 12 Jan 2009 17:55:29 -0500

 with HTTPD PMC hat:
    This is actually going to be removed and *possibly* replaced with a 
 run-time option.
 
 With that in mind, I don't think we should add this, as it actually is a 
 security concern.
 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200901122300.n0CN03bS038681>