Tagged Questions

4
votes
1answer
73 views

HTTP Headers caching

I am not totally sure bout HTTP headers, but from what I read its good to have some level of caching on static pages also I am not sure if Transfer Encoding: chunked is a good thing. I was not finding ...
2
votes
1answer
55 views

Why was 303 skipped in HTTP/1.0?

While looking back over HTTP response codes today I noticed that the 301, 302, and 304 response codes were defined in HTTP/1.0 but not the 303 response code. Does anyone know why the number 303 was ...
6
votes
1answer
107 views

Does the SPDY protocol eliminate the need for cookieless domains?

With plain HTTP, cookieless domains are an optimization to avoid unnecessarily sending cookie headers for page resources. However, the SPDY protocol compresses HTTP headers and in some cases ...
4
votes
1answer
990 views

HTTP Header Cache Time: s-maxage and max-age

I am setting up a CDN for my website, I found the following sample for adding to the 'httpd.conf' file, this is used to adjust the cache-time for client and CDN: ExpiresActive On ExpiresByType ...
7
votes
2answers
767 views

What are the Consequences for using Relative Location Headers?

According to the spec, Location headers used in a redirect require a server name HTTP/1.1 301 Moved Permanently ... Location: http://example.com/foo/baz/bar However, in 2012, most web browsers will ...
3
votes
1answer
166 views

Use - or misuse - of ETags

I'm using an application that sets ETags by md5()ing the URL. As I understand it, that's quite insane. In effect, it means that content for a specific URL won't be fetched anew ... ever. Unless a ...
2
votes
2answers
847 views

Should 304 Not Modified responses include the “Last Modified” header?

I've been using the most excellent http://redbot.org tool for testing have HTTP headers on my site correct (its custom code in PHP serving dynamic content - wanting to ensure it cached where possible ...
1
vote
2answers
165 views

Google Analytics when 404 handler is used as 'mod_rewrite'?

I'm consulting on a web site which in order to provide clean URL's uses the 404 handler to catch what would otherwise be a 404 and serve the correct content. In case that's not clear the 404 handler ...
1
vote
2answers
67 views

Verifying that a user comes from a 'partner' site?

We're building a Drupal module that is going to be given to trusted 'corporate partners'. When a user clicks on a link, he should be redirected to our site as if he's a logged in user. How should I ...
3
votes
2answers
129 views

HTTP response for deleted or disabled items on ecommerce store

What HTTP response should you send when an item/category on your ecommerce site has been disabled or deleted? 410 looks correct for deleted products but not sure about something that has been disabled ...
10
votes
2answers
1k views

Considerations of the HTTP Content-MD5 Header

We are debating whether to use the Content-MD5 header. Pros: The CMS allows us to easily include it with minimal overhead (cached responses in 80%+ of the cases). It would add another layer of ...
3
votes
2answers
72 views

Browser privacy improvement implications for websites

On https://panopticlick.eff.org/ EFF let you test the number of uniquely identifying bits that the browser gives a website. Among these are HTTP header fields such as User-Agent, Accept, ...