Re: #536: clarify extensibility for :pseudo header fields

On 2 Jul 2014, at 4:04 pm, David Krauss <> wrote:

> On 2014–07–02, at 1:53 PM, Mark Nottingham <> wrote:
>> Um, no. Collapsing the two namespaces into one is a security nightmare along the lines of <>.
> Then, say so in the spec that ALPN tokens shouldn’t alias pseudos with headers and ALPN-basis APIs shouldn’t expose headers as pseudos (the converse of the existing restriction).
> Just to point out, you don’t have that problem in the first place if you don’t open the second namespace.

Now I'm confused. We're currently talking about whether extra :headers are a hard error when http/2 is in use. What's an ALPN-basis API?

Mark Nottingham

Received on Wednesday, 2 July 2014 06:08:19 UTC