Tag Info

Hot answers tagged

27

HTTP request in question is actually not valid unless browser is talking to intermediary (proxy). Your example would look bit more like following if browser was talking with web server directly: GET /hello.htm HTTP/1.1 Host: www.pippo.it Now to put it in perspective consider OSI layer model So we have 3 systems in action. Client running the browser ...


14

It's in the Host header: curl -v http://www.google.ca/ >/dev/null * Hostname was NOT found in DNS cache % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* Trying ...


12

HTTP is transported over TCP, which is a IP protocol. To make an HTTP request, the browser has to open a TCP connection, and do to that, it needs the destination IP address (i.e. the IP address of the server). To resolve the server's hostname, it has thus to issue a DNS request (generally the DNS request itself is sent by the operating system when a program ...


7

The procedure goes like this: The user (you) gives the browser a URL, like http://www.pippo.it/hello.htm The browser splits that into three parts: Protocol http Hostname www.pippo.it URL path /hello.htm (a more complicated URL could have other parts too, I'll ignore that possibility for now) The browser knows that in order to create an IP connection, ...


2

HTTP is NOT a secure protocol, it never has been, and is not meant to be. HTTPS IS the same protocol over a secure channel, though only if you use TLS 1.0 or newer (TLS 1.2 is highly recommended as 1.0 and 1.1 have known issues).


1

Limiting the access on the side of Apache is a more general approach that works for everything, including static files. It's a generally more secure approach because the request is blocked before the PHP interpreter ever sees it, making it impossible (or at least much more difficult) to exploit bugs in the PHP app. Limiting the access on the side of a PHP ...


1

Hop-by-hop only means that the proxy is free to change the header as it sees fit and interpret it immediately; the header should not be forwarded without interpretation. The default for HTTP/1.1 is persistent connections unless one of the parties on a connection (either client-to-proxy or proxy-to-server) specifies the Connection: close header. This header ...


1

Aaarrgh... I was barking up the wrong tree! The characters work just fine. In the map file (which is a few thousand lines long) I had a duplicate key. so the conflicting parameter actually means duplicate key in map


1

These log lines can come if you open a connection to your server on port 80 like telnet 1.2.3.4 80 or nc 1.2.3.4 80 but do not send anything and just wait it times out. It can be anything from just badly written scripts to testing for a dos attack (check out slowloris). But it seems from your log lines that this is not the cause for your CPU problem.


1

I experienced this. What I did was to chown the directory. So, if your public_html is under /var/www/example.com , it would be something like this: chown -R www-data:www-data /var/www/example.com With www-data is username and group of nginx.


1

In brief , your correct to assume any external resource that is hosted on https:// with any type of SSL/TSL etc will cause no noticeable effect to any of your visitors. We had this exact same question when we were forced to include some remote JS by our payment card processor. After some research with every device and browser combination we could get hold ...



Only top voted, non community-wiki answers of a minimum length are eligible