W3C home > Mailing lists > Public > ietf-http-wg@w3.org > January to March 2016

Re: HTTP/2 and HTTPS BICYCLE attack

From: Martin Thomson <martin.thomson@gmail.com>
Date: Fri, 8 Jan 2016 08:34:22 +1100
Message-ID: <CABkgnnU9GYs4NRjHEo9TQuqHzO4ybPtTGgNjdu=VWNg1m9_V+w@mail.gmail.com>
To: Ilari Liusvaara <ilariliusvaara@welho.com>
Cc: "Smith, Kevin, (R&D) Vodafone Group" <Kevin.Smith@vodafone.com>, "ietf-http-wg@w3.org" <ietf-http-wg@w3.org>
On 8 January 2016 at 00:50, Ilari Liusvaara <ilariliusvaara@welho.com> wrote:
> HTTP/2 has padding support too (at least for HEADERS and DATA), right?

Yes, but no one is using it to mitigate this sort of length recovery.
At least as far as I know.
Received on Thursday, 7 January 2016 21:34:51 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 22 March 2016 12:47:10 UTC