enforcing access is via urlbase
justdave at bugzilla.org
Fri Oct 1 07:08:09 UTC 2004
Christian Robottom Reis wrote:
> On Fri, Oct 01, 2004 at 09:15:15AM +0800, bugzilla at glob.com.au wrote:
>>>Another point is that if the end-user is using HTTP/1.0 to access
>>>Bugzilla, then there is no way for Bugzilla to know which hostname they
>>>used. (although we can certainly tell if they're using SSL or not)
>>ah. i'd forgotten about that. that would be a show stopper.
> Odd. Doesn't the 1.0 spec define a Host: header that is mandatory? AFAIK
> only 0.9 allowed Host:less connects.
Nope. That's why name-based virtual hosts don't work in HTTP/1.0
Dave Miller Project Leader, Bugzilla Bug Tracking System
More information about the developers