[Volunteers] [svlug] nifties listing?

[Ian Kluft]

On Wed, Oct 12, 2005 at 01:57:27PM -0700, Bill Ward wrote:
> I've never understood why people think it's a security hole to not allow the
> built-in Apache directory listing. I'm tempted to enable it, at least for
> this directory, or to AllowOverride it so that Rick can put it in a
> .htaccess file. Anyone have a strong opinion about it?

AllowOverride is not a problem if you know who your users are.  Apache can't
make that assumption on the default settings for the code.