Documentation Source Text

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

Changes to misc/althttpd.md.

    28     28   itself listens on port 80 for incoming HTTP requests, then forks
    29     29   a copy of itself to handle each inbound connection.  Each connection
    30     30   is still handled using a separate process.  The only difference is
    31     31   that the connection-handler process is now started by a master
    32     32   althttpd instance rather than by xinetd or stunnel4.
    33     33   
    34     34   Althttpd has no configuration file. All configuration is handled
    35         -using a few command-line arguments. This helps to keep this
    36         -configuration simple and mitigate worries about about introducing
           35  +using a few command-line arguments. This helps to keep the
           36  +configuration simple and mitigates worries about about introducing
    37     37   a security vulnerability through a misconfigured web server.
    38     38   
    39     39   Althttpd does not itself handle TLS connections.  For HTTPS, althttpd
    40     40   relies on stunnel4 to handle TLS protocol negotiation, decryption, and
    41     41   encryption.
    42     42   
    43     43   Because each althttpd process only needs to service a single
................................................................................
   245    245   The "-auth" file is plain text and line oriented.
   246    246   Blank lines and lines that begin with "#" are ignored.
   247    247   Other lines have meaning as follows:
   248    248   
   249    249     *  <b>http-redirect</b>
   250    250   
   251    251        The http-redirect line, if present, causes all HTTP requests to
   252         -     redirect into an HTTPS request.
          252  +     redirect into an HTTPS request.  The "-auth" file is read and
          253  +     processes sequentially, so lines below the "http-redirect" line
          254  +     are never seen or processed for http requests.
   253    255   
   254    256     *  <b>https-only</b>
   255    257   
   256    258        The https-only line, if present, means that only HTTPS requests
   257    259        are allowed.  Any HTTP request results in a 404 Not Found error.
   258    260        The https-only line normally occurs after an http-redirect line.
   259    261