Re: [whatwg/fetch] Streaming upload and HTTP protocol info leak (#1007) from Yutaka Hirano on 2020-04-22 (public-webapps-github@w3.org from April 2020)

From: Yutaka Hirano <notifications@github.com>
Date: Wed, 22 Apr 2020 02:06:08 -0700
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/issues/1007/617652396@github.com>

That information is used as a hint when we don't get information via ALPN. I don't think we need to provide that information for all cases - for example we can assume that the HTTP version is HTTP 1.0 when

- No ALPN information is available,
- The request is same-origin, and
- We don't have the hint information (e.g., the fetch client is a blob document).

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1007#issuecomment-617652396

Received on Wednesday, 22 April 2020 09:06:20 UTC