W3C home > Mailing lists > Public > ietf-http-wg@w3.org > July to September 2021

Re: Attack research on HTTP/2 implementations

From: Willy Tarreau <w@1wt.eu>
Date: Fri, 6 Aug 2021 18:36:12 +0200
To: Mike Bishop <mbishop@evequefou.be>
Cc: Nick Harper <ietf@nharper.org>, HTTP Working Group <ietf-http-wg@w3.org>, Martin Thomson <mt@lowentropy.net>
Message-ID: <20210806163612.GA30209@1wt.eu>
On Fri, Aug 06, 2021 at 03:04:33PM +0000, Mike Bishop wrote:
> :authority isn't included in the list because it's slightly different - it's
> not mandatory.

That's what I understood as well.

> So the others must occur exactly once (which is stated),
> while :authority must occur no more than once (which isn't).
> 
> But yes, that should be called out explicitly.

Definitely :-)

Willy
Received on Friday, 6 August 2021 16:36:33 UTC

This archive was generated by hypermail 2.4.0 : Friday, 6 August 2021 16:36:35 UTC