News for hackers. Stuff that matters.
Re:HTTP GZIP Compression remote date and time leak by masklinn on Monday February 22, 2016 @06:54AM (#11150187)
> Most webservers fill this date field with zeros, about 10% use the actual date, including the timezone

They can't include the timezone since the field is a unix timestamp, there's no room for the timezone.

Apparently the script just assumes whichever date is stored in the mtime field is a local date (when the spec suggests UTC/GMT): https://github.com/jcarlosn/gzip-http-time/blob/master/time....

There are no comments on this comment yet.