Re: HTTP/2 States and Frame Types <draft-ietf-httpbis-http2-17> from Martin Thomson on 2015-03-06 (ietf-http-wg@w3.org from January to March 2015)

From: Martin Thomson <martin.thomson@gmail.com>
Date: Fri, 6 Mar 2015 11:23:16 -0800
To: Bob Briscoe <bob.briscoe@bt.com>
Cc: Mike Belshe <mbelshe@chromium.org>, "fenix@google.com" <fenix@google.com>, HTTP Working Group <ietf-http-wg@w3.org>
Message-ID: <CABkgnnXSGmXH4w_9QGPfu8-ty6tQ3yiVLqCcENfxiEU1JHYPTw@mail.gmail.com>

On 6 March 2015 at 11:05, Bob Briscoe <bob.briscoe@bt.com> wrote:
> Why does padding have to be filled with zeros? There are good cryptographic
> reasons for not requiring this.

Remember POODLE, I think that the opposite is true.  Also c.f. IND-CCA
(and IND-CCA2).

Received on Friday, 6 March 2015 19:23:43 UTC