Hrvoje Niksic wrote: > I don't see how and why a web site would generate headers (not bodies, to > be sure) larger than 64k.
To be honest, I'm less concerned about the 64K header limit than I am about limiting a header line to 4096 bytes. I don't know any sites that send back header lines that long, but they could. Who's to say some site doesn't have a 4K cookie? Since you already proposing to limit the entire header to 64K, what is gained by adding this second limit? Tony