dNama 0 Posted February 27, 2023 Share Posted February 27, 2023 Hello, it is possible to disable TRACE/TRACK in Apache HTTP Proxy that is used by ESET for caching downloads and updates? Thanks. Link to comment Share on other sites More sharing options...
ESET Insiders Solution Podrska2NORT 5 Posted February 27, 2023 ESET Insiders Solution Share Posted February 27, 2023 As Marcos wrote earlier: When it comes to HTTP Debugging Methods (TRACE/TRACK) Enabled See https://httpd.apache.org/docs/2.4/mod/core.html#traceenable "Despite claims to the contrary, enabling the TRACE method does not expose any security vulnerability in Apache HTTPd. The TRACE method is defined by the HTTP/1.1 specification and implementations are expected to support it." Customers can enable/disable them in the configuration using syntax TraceEnable [on|off|extended]... Link to comment Share on other sites More sharing options...
Recommended Posts