Re: Dictionary Compression for HTTP (at Facebook) from Jyrki Alakuijala on 2018-09-01 (ietf-http-wg@w3.org from July to September 2018)

From: Jyrki Alakuijala <jyrki@google.com>
Date: Sat, 1 Sep 2018 07:23:00 +0200
To: Ryan Sleevi <ryan-ietf@sleevi.com>
Cc: Felix Handte <felixh@fb.com>, Mark Nottingham <mnot@mnot.net>, Charles McCathie Nevile <chaals@yandex-team.ru>, Evgenii Kliuchnikov <eustas@google.com>, Vlad Krasnov <vlad@cloudflare.com>, Nick Terrell <terrelln@fb.com>, Yann Collet <cyan@fb.com>, "ietf-http-wg@w3.org Group" <ietf-http-wg@w3.org>
Message-ID: <CAPapA7SndU+P+AvyWmanoBtWdX7QbpFPCOe7Cu4X=BkM1ak34Q@mail.gmail.com>

On Fri, Aug 31, 2018 at 4:58 PM, Ryan Sleevi <ryan-ietf@sleevi.com> wrote:
>
> Of course, this is all after the security concerns are mitigated ;)
>

We involved Thai Duong in the security analysis and we have a limited scope
solution that allows much of the benefits without these security
concerns. One main mitigation there is to never compress data mixed from
public and private sources.

Received on Saturday, 1 September 2018 05:24:27 UTC