Re: draft-ietf-httpbis-resumable-upload-01

On Thu, 27 Jul 2023, 12:09 Rob Sayre, <sayrer@gmail.com> wrote:

> On Thu, Jul 27, 2023 at 10:10 AM Lucas Pardue <lucaspardue.24.7@gmail.com>
> wrote:
>
>>
>> Resumable uploads should probably minimally mention something about
>> integrity of HTTP message content (parts) and the integrity of the whole
>> object.
>>
>
> Hi, that's all I meant to suggest. The problems I've seen are not external
> security threats, but bugs in reassembling the parts on the server, after
> TLS termination.
>

Yep this is totally in scope of problems that digest is intended to help
mitigate. Thanks for the confirmation, I'll prepare some text in a PR for
the uploads draft.

Cheers
Lucas

>
> thanks,
> Rob
>
>

Received on Thursday, 27 July 2023 20:21:37 UTC