Re: Preparations for ZD's upcoming Apache/Linux benchmark

H. Peter Anvin (hpa@transmeta.com)
10 Jun 1999 15:07:25 GMT


Followup to: <Pine.LNX.4.02A.9906092354120.7978-100000@phobos.illtel.denver.co.us>
By author: Alex Belits <abelits@phobos.illtel.denver.co.us>
In newsgroup: linux.dev.kernel
> >
> > If you intend to implement HTTP, and you intend to use the Last-Modified
> > or Expires headers, then you MUST include a Date header. See rev-06 of
> > the update to rfc2068 for more clarification.
>
> This is not the only flaw in HTTP 1.1 design.
>
> > And given that static responses are the best places where Last-Modified
> > and Expires can be used... it seems silly to omit them.
>

It seems that it shouldn't be that difficult; the date can be
transmitted by patching in a fixed-length string in UTC (only); even
if you play tricks with precomputed checksums the IP checksum
algorithm is order-independent, so you just need to checksum the date
string and add to the precomputed checksum.

-hpa

-- 
"The user's computer downloads the ActiveX code and simulates a 'Blue
Screen' crash, a generally benign event most users are familiar with
and that would not necessarily arouse suspicions."
-- Security exploit description on http://www.zks.net/p3/how.asp

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/