- From: Ryan Hamilton <rch@google.com>
- Date: Wed, 12 Nov 2014 08:27:32 -0800
- To: Greg Wilkins <gregw@intalio.com>
- Cc: Mark Nottingham <mnot@mnot.net>, HTTP Working Group <ietf-http-wg@w3.org>
Received on Wednesday, 12 November 2014 16:27:59 UTC
On Tue, Nov 11, 2014 at 8:58 PM, Greg Wilkins <gregw@intalio.com> wrote: > I assume that there is an implied: > > BAD = peer MAY fallback to h1 (if able to influence ALPN protocol > selection) > > and that will not be seen as a downgrade attack (or at least and > acceptable one). > Can you explain why this would be desirable? It sure sounds like a downgrade attack path to me.
Received on Wednesday, 12 November 2014 16:27:59 UTC