machine.config httpHandlers

[dloughran]

Can anyone explain why the following two entries exist in the .NET 1.1
machine.config file? Are they not a potential security risk being associated
with the StaticFileHandler? Can they be safely removed or are there services
that rely on these entries being present?

<add verb="GET,HEAD" path="*.dll.config" type="System.Web.StaticFileHandler"/>
<add verb="GET,HEAD" path="*.exe.config" type="System.Web.StaticFileHandler"/>

Any light shed would be appreciated.

Thanks.

Don Loughran