Difference between revisions of "Talk:Server.pl"

Revision as of 09:05, 16 February 2006

Here are some directives Apache uses when it deals with IE clients:

SetEnvIf User-Agent ".*MSIE.*" \

nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0

Might give a clue to it's little quirks.

--Rob 09:44, 16 Feb 2006 (NZDT)

Currently HTTP authentication is just base64 encoded username:password which is basically just plain text, so the password can easily be discovered.

Socket can't bind to port for a minute or so after peer stops. Shutting it officially, blocking, autoflush don't work. netstat -tupl and lsof -i 1729 show that the port is freed immediately, but it still won't bind until after the delay.

@@ Line 13: / Line 13: @@
 *[http://greenbytes.de/tech/webdav/rfc2617.html RFC2617]
 *[http://www.rassoc.com/gregr/weblog/stories/2002/07/09/webServicesSecurityHttpDigestAuthenticationWithoutActiveDirectory.html MS ActiveDirectory, but lots of MD5 header info]
+# Bugs & Notes
+*Socket can't bind to port for a minute or so after peer stops. Shutting it officially, blocking, autoflush don't work. <tt>netstat -tupl</tt> and <tt>lsof -i 1729</tt> show that the port is freed immediately, but it still won't bind until after the delay.