[mannyv]

Parts of 1.1 are pretty complicated if you try and implement them. Parts of it are simple.

The whole section on cache is "reality based," and it's only gotten worse as the years have moved on.

Anyway, back in the day Content-Length was one of the fields you were never supposed to trust. There's really no reason to trust it now, but I suppose you can use it as a hint to see amount of buffer you're supposed to allocate. But of course, the content length may exceed that length, which would mean that if you did it incorrectly you'd copy the incoming request data past the end of the buffer.

So even today, don't trust Content-Length.

[treflop]

You can’t trust lengths in any protocol or format.