Dear all,
Although TAPIR is layered on top of HTTP, the existing documents 
(including the spec) don't mention anything about HTTP versions.
I was recently asked about this because it seems that providers that 
are installed on HTTP/1.1 servers are starting to reject HTTP/1.0 
requests, probably for security reasons.
I think we should be more explicit in the specification about the 
minimum HTTP version compatible with TAPIR. In this case HTTP/1.0 
(the previous version didn't even have the POST method).
This means that a TAPIR provider can potentially be installed on an 
HTTP/1.0 or 1.1 server. In both cases, technically there should be no 
problem to process requests in either HTTP/1.0 or 1.1 (1.0 servers 
will simply ignore 1.1 extensions, and 1.1 servers are "expected" to 
be able to easily handle requests in previous versions, as noted in 
the HTTP/1.1 RFC).
Anyway, considering the fact that HTTP/1.1 servers are starting to 
deny 1.0 requests, I could add a recommendation for TAPIR clients to 
always send requests in HTTP/1.1. This would not be a "protocol 
rule", just a pragmatic recommendation, so I would probably add this 
in the TAPIR network builders' guide instead of the spec.
Please let me know if you have any ideas or suggestions in this 
respect.
Best Regards,
--
Renato