Re: [TLS] Connection diversion to other subdomains

"Jeffrey A. Williams" <jwkckid1@ix.netcom.com> Fri, 05 November 2010 18:11 UTC

Return-Path: <jwkckid1@ix.netcom.com>
X-Original-To: tls@core3.amsl.com
Delivered-To: tls@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8A41A3A691A for <tls@core3.amsl.com>; Fri, 5 Nov 2010 11:11:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7j66mAf+cdGO for <tls@core3.amsl.com>; Fri, 5 Nov 2010 11:11:27 -0700 (PDT)
Received: from elasmtp-curtail.atl.sa.earthlink.net (elasmtp-curtail.atl.sa.earthlink.net [209.86.89.64]) by core3.amsl.com (Postfix) with ESMTP id 142EE3A6917 for <tls@ietf.org>; Fri, 5 Nov 2010 11:11:27 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=dk20050327; d=ix.netcom.com; b=sFPbjrMjdXWHbHeXesptOqx8gF1o818pZQf6X8unwtWWytbQvgw3RWH9elR1OBOz; h=Message-ID:Date:From:Reply-To:To:Subject:Mime-Version:Content-Type:Content-Transfer-Encoding:X-Mailer:X-ELNK-Trace:X-Originating-IP;
Received: from [209.86.224.48] (helo=elwamui-rustique.atl.sa.earthlink.net) by elasmtp-curtail.atl.sa.earthlink.net with esmtpa (Exim 4.67) (envelope-from <jwkckid1@ix.netcom.com>) id 1PEQlI-0008Pi-33 for tls@ietf.org; Fri, 05 Nov 2010 14:11:40 -0400
Received: from 99.93.224.206 by webmail.earthlink.net with HTTP; Fri, 5 Nov 2010 14:11:39 -0400
Message-ID: <31793270.1288980700103.JavaMail.root@elwamui-rustique.atl.sa.earthlink.net>
Date: Fri, 5 Nov 2010 13:11:39 -0500 (GMT-05:00)
From: "Jeffrey A. Williams" <jwkckid1@ix.netcom.com>
To: IETF TLS WG <tls@ietf.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: EarthLink Zoo Mail 1.0
X-ELNK-Trace: c8e3929e1e9c87a874cfc7ce3b1ad11381c87f5e51960688f8f7a5dac3b35f60dcdcb2fa467ab9ac350badd9bab72f9c350badd9bab72f9c350badd9bab72f9c
X-Originating-IP: 209.86.224.48
Subject: Re: [TLS] Connection diversion to other subdomains
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: "Jeffrey A. Williams" <jwkckid1@ix.netcom.com>
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tls>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 05 Nov 2010 18:11:29 -0000

Joe and all,


-----Original Message-----
>From: Joe Orton <jorton@redhat.com>
>Sent: Nov 5, 2010 1:04 PM
>To: Marsh Ray <marsh@extendedsubset.com>
>Cc: IETF TLS WG <tls@ietf.org>
>Subject: Re: [TLS] Connection diversion to other subdomains
>
>On Fri, Nov 05, 2010 at 12:00:46PM -0500, Marsh Ray wrote:
>> More worryingly,
>> http://www.alphastate.com/x-host-vs-host-headers-in-apache   says:
>> "Apache picks the X-Host header over the Host header, so if there
>> are two different virtual hosts for origin.example.com and
>> www.example.com the request ends up at www.example.com instead of
>> the intended origin.example.com."
>
>That's complete fiction, Apache httpd does no such thing.

  Yeah, I've never seen Apache do as Marsh suggests.  Thanks
for the clairfication Joe.
>
>Regards, Joe
>_______________________________________________
>TLS mailing list
>TLS@ietf.org
>https://www.ietf.org/mailman/listinfo/tls

Regards,
Jeffrey A. Williams
"Obedience of the law is the greatest freedom" -
   Abraham Lincoln

"Credit should go with the performance of duty and not with what is very
often the accident of glory" - Theodore Roosevelt

"If the probability be called P; the injury, L; and the burden, B; liability
depends upon whether B is less than L multiplied by
P: i.e., whether B is less than PL."
United States v. Carroll Towing  (159 F.2d 169 [2d Cir. 1947]
===============================================================
Updated 1/26/04
Network Eng. SR. Eng. Network data security
ABA member in good standing member ID 01257402 
E-Mail jwkckid1@ix.netcom.com
Phone: 214-244-4827