On Fri, Nov 05, 2021 at 08:24:21AM -0600, Theo de Raadt wrote: > prx <p...@si3t.ch> wrote: > > > I think this remark should be placed into perspective. > > > > When a file is requested, its gzipped version is send if : > > * The client ask for it with appropriate header. > > * The server admin configured httpd to do so **and** compressed files. > > and if the gzipd file does not contain the contents as the ungzip'd > file, then two different clients may get different results.
Just as big-endian and little-endian architectures can be fed different files from the same ISO-9660 filesystem. The issue you describe certainly exists, but it's not without precedent. It could even be considered a feature, if the client supports compression then send more verbose content.
