Correction : 8.2.4 is the latest of the 8.x, and is still affected. We can't ask clients to update their software, so even if it's fixed in a newer Reader, the problem will remain for years. Apache, IIS are already working around that issue, why not lighttpd ?