>> Yep. It's a bit redundant, but consider that CONNECT is already the
>> odd kid among the HTTP verbs. Most other verbs only take an absolute
>> path URI, without host component.
> 
> On the other hand, in a proxy context the host component is always
> present even for the other methods.  ("The absoluteURI form is REQUIRED
> when the request is being made to a proxy.")  In that sense the host
> header is sort-of redundant for all proxy requests, and could be used
> for name-based "do we act as a proxy or an origin server" decisions.

I would agree with that. When thinking about it, the Host header doesn't
make any sense to me.

My expectation would be that the proxy server uses the host name given
after GET (or CONNECT) to regulate access control (and to forward it as
'new' Host header) and the Host header to disambiguate between multiple
virtual hosts (e. g. like in my case with a configuration where a normal
web server and a proxy server have the same IP address and are
represented by two different Apache virtual hosts). With that, both host
fields would serve different purposes and wouldn't be redundant.

Lars

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to