Re: careful on your clicks: at least one hijacked server

[sebb <se...@gmail.com>]

On 21/03/2010, Kevin A. McGrail <KM...@pccc.com> wrote:
>
>  Re:
> http://www.takeyellow.com/apachemirror/spamassassin/Mail-SpamAssassin-3.3.2.tar.gz.asc
>
>  The page in question is a 404 error page (see headers below) as of
> 9:48AMEDT on the 21st of March.  So they are still behind on the mirroring
> and the default 404 they are using is not appropriate for mirror space.  I
> would support a rule that a default 404 for mirror space should redirect
> them back to the original project page.

+1

Their 404 page handling is very confusing - it's not immediately
obvious that the problem is a missing file.

I would favour disallowing 404 error pages for mirrors - just return 404.

I think we should ban the behaviour of takeyellow entirely.


>  Regards,
>  KAM
>
>
> Response Headers -
> http://www.takeyellow.com/apachemirror/spamassassin/Mail-SpamAssassin-3.3.2.tar.gz.asc
> Date: Sun, 21 Mar 2010 13:37:26 GMT
> Server: Apache/2.2.15 (Unix) mod_ssl/2.2.15 OpenSSL/0.9.8m DAV/2
> mod_fcgid/2.3.5 mod_auth_passthrough/2.1 mod_bwlimited/1.4
> FrontPage/5.0.2.2635
> X-Powered-By: PHP/5.2.13
> Expires: Thu, 19 Nov 1981 08:52:00 GMT
> Cache-Control: no-store, no-cache, must-revalidate, post-check=0,
> pre-check=0
> Pragma: no-cache
> Keep-Alive: timeout=5, max=100
> Connection: Keep-Alive
> Transfer-Encoding: chunked
> Content-Type: text/html; charset=utf-8
>
> 404 Not Found
>
>
>
>