> -----Original Message----- > From: Jim Jagielski [mailto:j...@jagunet.com] > Sent: Mittwoch, 24. August 2011 18:02 > To: dev@httpd.apache.org > Subject: Re: DoS with mod_deflate & range requests > > Sorting isn't allowed but I get the impression that merging is OK... > Roy can confirm...
But merging might require sorting... > > If not, then some sort of runtime limit on the number of allowable > ranges plus a 416 w/ overlapping ranges makes the most sense. > > On Aug 24, 2011, at 11:55 AM, Plüm, Rüdiger, VF-Group wrote: > > > > Hm. If I got it right what Roy says above about the spec > sorting and merging is > > not an option as we need to stick to the order and number > of ranges the client > > requested. But we can deny overlapping with a 416. > > Or we do a 416 as well if merging would change something. > > > > Regards > > > > Rüdiger > > > > Regards Rüdiger