Apache HTTP Server 2.4.58 (CVE fixes)
"The early Apache server was a big hit, but we all knew that the codebase needed a general overhaul and redesign."
From the README of the apache_1.3.0 distribution (April 1998) https://archive.apache.org/dist/httpd/
Love this project. It changed the world and it still goes strong. The closest to "forever software"?
Relevant,
HTTP/2 Rapid Reset and Apache
https://github.com/icing/blog/blob/main/h2-rapid-reset.md
Apache httpd 2.4.58
for PoC in Rust, https://github.com/m00dy/r4p1d-r3s3t
A Patchy Server has come such a long way.
Surprising to see stuff like this included in a patch release:
That’s probably going to break something for somebody.core: Updated conf/mime.types: - .js moved from 'application/javascript' to 'text/javascript'
Is HTTP/2 just too complex for a mere mortal to implement?
[flagged]
I'm surprised people still actively use it and it seems on par with nginx, at least according to https://www.netcraft.com/blog/january-2023-web-server-survey...