Re: HTTP/2 and HTTPS BICYCLE attack from Martin Thomson on 2016-01-07 (ietf-http-wg@w3.org from January to March 2016)

From: Martin Thomson <martin.thomson@gmail.com>
Date: Fri, 8 Jan 2016 08:34:22 +1100
To: Ilari Liusvaara <ilariliusvaara@welho.com>
Cc: "Smith, Kevin, (R&D) Vodafone Group" <Kevin.Smith@vodafone.com>, "ietf-http-wg@w3.org" <ietf-http-wg@w3.org>
Message-ID: <CABkgnnU9GYs4NRjHEo9TQuqHzO4ybPtTGgNjdu=VWNg1m9_V+w@mail.gmail.com>

On 8 January 2016 at 00:50, Ilari Liusvaara <ilariliusvaara@welho.com> wrote:
> HTTP/2 has padding support too (at least for HEADERS and DATA), right?

Yes, but no one is using it to mitigate this sort of length recovery.
At least as far as I know.

Received on Thursday, 7 January 2016 21:34:51 UTC