Changeset 654

Timestamp:

29/07/09 10:58:42 (14 years ago)

Author:

ylafon@…

Message:

Resolve #33: Added TRACE security considerations (closes #33)

File:

• draft-ietf-httpbis/latest/p2-semantics.xml (modified) (2 diffs)

draft-ietf-httpbis/latest/p2-semantics.xml

@@ -2615 +2615 @@
    purposes for which HTTP currently has no better mechanism.
 </t>
+<t>
+  Some methods, like TRACE (<xref target="method.trace" />) may expose 
+  information sent in request headers in the response entity. 
+  Clients &SHOULD; be careful with sensitive information, like Cookies, 
+  Authorization credentials and other headers that might be used to 
+  collect data from the Client.
+</t> 
 </section>
 
@@ -3628 +3635 @@
       "Location header ABNF should use 'URI'"
     </t>
+    <t>
+      <eref target="http://tools.ietf.org/wg/httpbis/trac/ticket/33"/>:
+      "TRACE security considerations"
+    </t>
   </list>
 </t>