Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

PUT request with HTTP authentication is quite standardized, isn't it?

The problem isn't that there are no standardized way of doing it. The problem is that the existing standardized way of doing it has no adoption, because it's not really optimal for current needs.



With FTP you login and are then in your home directory. Then you upload. With HTTP authentication is a home directory required? Can you do `pwd` to query your home folder. Some FTP clients allow standboxing where you are in /home/user folder but `pwd` says `/`.


There are like at least 3 different mainstream ways to "log in" to a web server, and all of them are more straightforward than FTP's insane mainframe-era control-channel/data-channel design.

The "sandboxing" you're referring to is a serverside chroot, for what it's worth. And, of course, web servers have been doing that since NCSA httpd.


Eh. When you realize that FTP supported opening two control channels to different systems and having them do a file transfer without involving the client, it makes more sense.

It was also possible for the client and server to fork off data handling processes for the data channel and continue to use the control connection without needing async poll/select loops.

Anyway, it wasn't insane. At the time anyway.


It's the "without needing async poll/select loops" thing that makes it so crazy. It's a protocol that encodes the multiprocessing limitations of its hosts.


In this case, choice may not be a benefit for coordination. If there’s one way to do it, there’s much less to communicate and debug.


Well, HTTP is still missing listings, and broadly HTTP seems a layer under where you would implement file semantics. But you aren’t wrong.


Could you say more about that? Is it just a question of integrating smoothly with websites and cookies, or is it a performance issue?


Frankly, I don't know why most people have chosen to use POST requests instead of PUT. Browsers and servers usually support both PUT and HTTP authentication, and when used over HTTPS it should be quite safe.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: