Re: [whatwg/fetch] Streaming upload and HTTP protocol info leak (#1007)

> The problematic part is, usually we know the HTTP version when the response arrives, in this case we need to fail the request before sending the request.

I’m not sure I understand? You know the transport protocol before you’ve sent the request. Either:
* You established a TLS connection and no ALPN was negotiated or H1 (1.1/1.0/0.9) was explicitly negotiated
  * Check the flag / Fail the request
* You established a TLS connection and ALPN negotiated H/2
  * You’re talking H/2 and are fine
* You established a QUIC connection and thus negotiated H/3
  * You’re talking H/3 and are fine

The only time you need the response to know the version is when you’re talking <= H/1, but that’s OK, because you already know that by needing that, you’re talking H/1

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1007#issuecomment-614361198