Re: Prague side meeting: HTTP/2 concurrency and request cancellation (CVE-2023-44487) from Watson Ladd on 2023-10-13 (ietf-http-wg@w3.org from October to December 2023)

From: Watson Ladd <watsonbladd@gmail.com>
Date: Fri, 13 Oct 2023 05:44:04 -0700
To: Poul-Henning Kamp <phk@phk.freebsd.dk>
Cc: Kazuho Oku <kazuhooku@gmail.com>, Stefan Eissing <stefan@eissing.org>, Willy Tarreau <w@1wt.eu>, Mike Bishop <mbishop@evequefou.be>, Martin Thomson <mt@lowentropy.net>, Glenn Strauss <gs-lists-ietf-http-wg@gluelogic.com>, Mark Nottingham <mnot@mnot.net>, HTTP Working Group <ietf-http-wg@w3.org>
Message-ID: <CACsn0ck8gzUzkeFBT8ooZ0+TN4igAJRS9HMr0LA82XgTwh5k8w@mail.gmail.com>

On Fri, Oct 13, 2023, 5:00 AM Poul-Henning Kamp <phk@phk.freebsd.dk> wrote:

> --------
> Kazuho Oku writes:
>
> > But honestly, I do not have an appetite to implement such an extension
> at the
> > moment, as I already have, and am required to have safeguards for
> vanilla H2.
> > As much as I like discussing about how better we can do by defining
> protocol
> > extensions, I kind of wonder if there is any H2  developer interested in
> > implementing the extension.
>
> -1 from here.
>

I am confused: do you want to implement it or not?

>
> --
> Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
> phk@FreeBSD.ORG         | TCP/IP since RFC 956
> FreeBSD committer       | BSD since 4.3-tahoe
> Never attribute to malice what can adequately be explained by incompetence.
>
>

Received on Friday, 13 October 2023 12:44:20 UTC