- From: Martin Thomson <martin.thomson@gmail.com>
- Date: Mon, 11 Mar 2013 10:47:50 -0400
- To: HTTP Working Group <ietf-http-wg@w3.org>
Received on Monday, 11 March 2013 14:48:19 UTC
It seems likely that magic will never be 100% reliable in terms of preventing HTTP/1.1 (and earlier) implementations from attempting to process HTTP/2.0 connections. Since we've decided to operate in the clear, we need to at least consider the "talking to yourself" attack. See https://github.com/http2/http2-spec/issues/35
Received on Monday, 11 March 2013 14:48:19 UTC