Re: please sign new apache releases only with strong keys -- trimming the KEYS file

2013-12-26 Thread Nick Kew
On 26 Dec 2013, at 21:47, Daniel Kahn Gillmor wrote: > As part of the dicsussion, it's become clear that some of the keys in > https://www.apache.org/dist/httpd/KEYS are weak by any modern > consideration of public key cryptography. Could this set of keys be > pruned? You're ahead of us. Indiv

please sign new apache releases only with strong keys -- trimming the KEYS file

2013-12-26 Thread Daniel Kahn Gillmor
Hi apache folks-- In http://bugs.debian.org/732450, debian is preparing to cryptographically verify OpenPGP signatures on apache upstream tarballs. As part of the dicsussion, it's become clear that some of the keys in https://www.apache.org/dist/httpd/KEYS are weak by any modern consideration of

Re: Behavior of Host: vs. SNI Hostname in proxy CONNECT requests

2013-12-26 Thread Ruediger Pluem
Yann Ylavic wrote: > On Mon, Dec 23, 2013 at 9:49 PM, Ruediger Pluem wrote: >> >> >> Kaspar Brand wrote: >>> On 21.12.2013 14:21, Ruediger Pluem wrote: > I guess a more general fix for this would be: No further comments / feedback? If not then I would commit the patch. >>> >>> The

Re: LocationMatch (and friends) and back references

2013-12-26 Thread Graham Leggett
On 26 Dec 2013, at 10:13, Nick Gearls wrote: > Why not using the standard regex syntax: > foo|bar)/baz/(?.*)"> Is it supported by our current API? Regards, Graham --

Re: LocationMatch (and friends) and back references

2013-12-26 Thread Nick Gearls
Why not using the standard regex syntax: foo|bar)/baz/(?.*)"> On 26-12-2013 08:43, Graham Leggett wrote: Hi all, It seems it is currently not possible to make reference to backreferences in regexes: Something ${1} One of the tricky things to overcome to make this possible is that multi