I was wondering how do you get rid of the http trace method. I have created a default internet site doc that has the trace method taken off, and I restarted the Http server. After doing all of this i still have the method coming back as up. How do I get rid of the trace method?
Thanks
Russ
Subject: HTTP Trace
Solution Currently there are no known vulnerabilities with the TRACE method on Domino 6. Domino 6.x does support the TRACE method in at least some configurations. To alleviate concern you can disable any method, including the TRACE method, when using the Internet Sites configuration in Domino 6. For more detail on setting up Internet Sites, refer to the Domino Administrator Help or the article “A tutorial on Web site addressing” available by searching on developerWorks Lotus at the following address:
For Domino 6 environments that cannot use Internet Sites, you can add the following parameter to the NOTES.INI file on the server to disable the TRACE method:
HTTPDisableMethods=TRACE