3 ms·
0-RTT requests mess with the traditional lifecycle and have security implications that many won't handle safely.
by labawi 7y ago
0-RTT requests mess with the traditional lifecycle and have security implications that many won't handle safely.
- Matthias247 7y ago0-RTT requests certainly have security implications. However they are not part of HTTP/2, but of TLS1.3 (and QUIC). They are orthogonal concerns, even though it's a valid layering concern: We have a transport layer concern leaking up into the HTTP layer - whether it's HTTP/1.1, /2 or /3. Also 0-RTT requests still follow the request/response model.