Re: Attack research on HTTP/2 implementations

On Fri, Aug 06, 2021 at 12:04:50AM -0700, Eric J Bowman wrote:
> To be expected (IMO) when major version numbers are tightly bound to a lower
> layer of the stack (/1 = TCP, /2 = SPDY, /3 = QUIC) when what I'd like to see
> is an HTTP spec (RFC) with generic language applicable to any underlying
> stack, otherwise what, /4 = SCTP anyone? Every time this happens, new
> assumptions are bound to be inherited, so to speak.

You mean like this maybe ?

   https://github.com/httpwg/http-core
   https://github.com/httpwg/http2-spec

Willy

Received on Friday, 6 August 2021 08:22:19 UTC