Re: h2#373 HPACK attack mitigation options from Martin Thomson on 2014-03-05 (ietf-http-wg@w3.org from January to March 2014)

From: Martin Thomson <martin.thomson@gmail.com>
Date: Wed, 5 Mar 2014 11:29:09 +0000
To: Roberto Peon <grmocg@gmail.com>
Cc: HTTP Working Group <ietf-http-wg@w3.org>
Message-ID: <CABkgnnV3DRYZb0tw-H=DryYPfOsD6YpPuG71DkPmMkgHvSBMbw@mail.gmail.com>

On 5 March 2014 11:09, Roberto Peon <grmocg@gmail.com> wrote:
> Option #4
> Requests originating from a domain which is not the origin to which the
> request is ultimately directed are disallowed to use *any* dynamic
> compressor state.

That would be a strict subset of #1 and thus perfectly good.

Received on Wednesday, 5 March 2014 11:29:37 UTC