Hacker News new | past | comments | ask | show | jobs | submit login

The content encoding header is meant to be extensible. This is where chrome added sdch and now we're about to get brotli compression in Firefox and chrome. If that release of trendmicro was still in use, people wouldn't be able to visit Google with chrome nor any upcoming site with brotli support.

Also, if they didn't like my ps-bzip2 encoding, they could have also stripped it off the clients accept-encoding header, causing the server to not compress the response. But they left it there and just stripped off the content-encoding response header.




Headers are meant to be flexible in theory, but in reality it seems that anything outside the most common few are going to break things.

The series of blog posts linked below might interest you.

http://noxxi.de/research/http-evader-explained-2-deflate.htm...




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: