3 ms·
Yep, that's in the vicinity of the solutions we're thinking about. There are a few proposals out there, and prior art like SDCH [1]. The hard part is that comp
by felixhandte 8y ago
Yep, that's in the vicinity of the solutions we're thinking about. There are a few proposals out there, and prior art like SDCH [1].
The hard part is that compression is already an attack vector for the web (e.g., CRIME [2], BREACH [3], et al.). We want to make sure that we're not eroding or unduly complicating that situation [4].
[1] https://tools.ietf.org/html/draft-lee-sdch-spec-00 https://tools.ietf.org/html/draft-lee-sdch-spec-00
[2] https://en.wikipedia.org/wiki/CRIME https://en.wikipedia.org/wiki/CRIME
[3] https://en.wikipedia.org/wiki/BREACH https://en.wikipedia.org/wiki/BREACH
[4] https://tools.ietf.org/html/draft-kucherawy-httpbis-dict-sec-00 https://tools.ietf.org/html/draft-kucherawy-httpbis-dict-sec...