Re: Mohamed Boucadair's No Objection on draft-ietf-httpbis-optimistic-upgrade-05: (with COMMENT)

Hi Med,

I've incorporated these suggestions: see https://github.com/httpwg/http-extensions/commit/97852dca45e2b2d297c35707d5f96ca7b0367d41.

> CURRENT:
>   Future specifications for upgrade tokens should account for the
>   security issues discussed here and provide clear guidance on how
>   implementations can avoid them.

> How this reco will be tracked?

I think the existence of this RFC ought to be sufficient to remind HTTPBIS and HTTPDIR to consider this question during their reviews.

--Ben

Received on Wednesday, 10 September 2025 14:51:01 UTC