4 ms·
"Note that these criteria for deciding to use a never-indexed literal representation will evolve over time as new attacks are discovered." Or, in other words:
by cperciva 10y ago
"Note that these criteria for deciding to use a never-indexed literal representation will evolve over time as new attacks are discovered."
Or, in other words: "We know that this is insecure. Maybe someone will fix it later."
- madgar 10y agoThat casual dismissal can be applied just as casually to the entire history of networking technologies, and it would be just as lazy and intellectually dishonest.
- Animats 10y agoTrue, but the HTTP/2 people were building a wrapper for data, not a security protocol. At least they put in a feature to suppress compression. Because of that, this can be fixed from one end; it's not necessary to deploy new browsers.