Re: draft-ietf-httpbis-replay-03, "5.1. The Early-Data Header Field"

On Tue, May 15, 2018 at 07:38:11PM +1000, Mark Nottingham wrote:
> Sure - although that's pretty broken for Host, this isn't a completely
> uncommon thing. When we did SOAPAction way back when (shudder), we came to
> the conclusion that some HTTP implementations might drop empty headers, so it
> wasn't safe -- but I don't remember how much data that was based upon.
> 
> That said, just because it's possible with HTTP headers doesn't mean it needs
> to be possible with structured headers.

I agree. I've also seen some components drop them and we'd rather not
rely on them.

Willy

Received on Tuesday, 15 May 2018 10:00:47 UTC