Re: Intermittent E_NOINTERFACE error, possibly RPC related

Michael,

Symantec's "Norton Internet Security (NIS)" is so brain-dead that it can't
figure out HTTP content that has been gzip-compressed. The Symantec
solution, astoudingly, was to change the request header, so that if your
browser (or, in my case, the client app that I had written) sent a request
with a "Accept-Encoding: gzip, deflate" header, Symantec changed it to
"Accept-Encoding: ----, -------" (literally, with the dashes), before it
let
the request out onto the wire, so as to suppress the server's return of
gzip'ed content. Their current version of NIS is almost worse: "WARNING:
New Norton Internet Security Issue" at
http://www.port80software.com/200ok/archive/2006/01/04/901.aspx

I am reading about the Accept-Encoding header for the first time. However,
my understanding is that if they just changed it to Accept-Encoding
compress:q=0, gzip:q=0, they would prevent the response from being
compressed and solve their perceived problem.

http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.3Accept-Encoding

However, they should not consider a compressed response to be a problem. By
preventing it, they may be breaking an application that requires it (even
though perhaps it shouldn't). If they really want to scrutinize the data,
why not decompress it and scrutinize that on the fly?

Is it really that simple?

Paul


.

Relevant Pages

  • Re: HTTP Post Authentication
    ... Credentials are stored in the database, ... The customer is making a request to webpage1.aspx and performing an http ... licenseKey as a request header and how does the application then read it in ... Can custom request headers be made or can I fill this ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Queries regarding Request Object
    ... > I have a few queries regarding request object. ... what is the default size of request header? ... get sent back - the response has a separate set of Headers you can use ...
    (comp.lang.java.programmer)
  • RE: HttpWebRequest Exception on HTTP/1.0 204 No Content
    ... and do a request header in the asp.net page. ... I have used the http request like this;-) ... To control the camera I have to send request on a CGI on it. ...
    (microsoft.public.dotnet.general)
  • Send current user token to IIS server
    ... I know that in intranet, the IE sends user token in the request header to enable single-sign-on. ...
    (microsoft.public.security)