W3C home > Mailing lists > Public > ietf-http-wg@w3.org > July to September 2014

Re: Striving for Compromise (Consensus?)

From: Roberto Peon <grmocg@gmail.com>
Date: Fri, 11 Jul 2014 18:27:15 -0700
Message-ID: <CAP+FsNf=10amD9zVuneTrdi89OHJYAaivBD5j9QeTwos85h-RQ@mail.gmail.com>
To: "K.Morgan@iaea.org" <K.Morgan@iaea.org>
Cc: Martin Thomson <martin.thomson@gmail.com>, Greg Wilkins <gregw@intalio.com>, Jeff Pinner <jpinner@twitter.com>, HTTP Working Group <ietf-http-wg@w3.org>
On Fri, Jul 11, 2014 at 1:12 PM, <K.Morgan@iaea.org> wrote:

> Hi Martin-
>
> I think that 5 is a non-starter.  Roberto's analysis on this has
> convinced me that this is an undesirable feature.
>
> What does...
> 5) Allowing interleaving of CONTINUATION frames with other frames.
> ...have to do with Roberto's analysis? Are you referring to his #1,
> unfinished header sets?
>
> That is solved by removing the reference set. Each
> HEADERS/PUSH_PROMISE/CONTINUATION frame can be interleaved with other
> frames from other streams so long as the aforementioned frame types are
> processed in order.
>
>
Unfortunately, these are orthogonal.
The reference set has zilch to do with the DoS vector here, as the DoS
vector would still be present even if the reference set didn't exist.

-=R


> (I don't buy that preventing state-changing hpack opcodes from crossing
> frame boundaries is so hard. If the *uncompressed* size of the next header
> is too big to fit in the remaining space, then finish up the current frame
> and start a new one.)
>
> -Keith
>
>
> This email message is intended only for the use of the named recipient.
> Information contained in this email message and its attachments may be
> privileged, confidential and protected from disclosure. If you are not the
> intended recipient, please do not read, copy, use or disclose this
> communication to others. Also please notify the sender by replying to this
> message and then delete it from your system.
>
>
Received on Saturday, 12 July 2014 01:27:41 UTC

This archive was generated by hypermail 2.3.1 : Wednesday, 30 March 2016 09:57:09 UTC