- From: Jonathan Thackray <jthackray+http2@gmail.com>
- Date: Wed, 2 Apr 2014 16:04:40 +0100
- To: ietf-http-wg@w3.org
Received on Wednesday, 2 April 2014 15:05:07 UTC
Hi, I'm currently writing an implementation of the HTTP/2 draft 10 specification. I was puzzled that (optional) padding is specified for HEADERS and CONTINUATION frames (because they contain header block fragments, to obscure the message length), but the PUSH_PROMISE frame format, which also contains header block fragments, doesn't allow arbitrary padding. As the draft currently stands, you can only send a PUSH_PROMISE frame without any padding for the first header block fragment, then subsequent CONTINUATION frames containing additional header block fragments with padding. Is this an oversight? Surely it should have padding as well, to be consistent. Or is this because headers sent from the server are not considered deserving of padding to obscure their length (and possible contents)? I couldn't see this listed on the "issues" page on GitHub, so raising this issue here. Many thanks, Jonathan.
Received on Wednesday, 2 April 2014 15:05:07 UTC