Comment by throwaway0665

The sever should cancel the request handler when the client drops. Otherwise you're just opening up to accidental DOS.