4 ms·
The header compression in http2 has atypical requirements placed upon it: contents of different headers in a single request must not impact each other's compres
by robryk 4y ago
The header compression in http2 has atypical requirements placed upon it: contents of different headers in a single request must not impact each other's compressed size[^], lest an attacker able to manipulate one of them can use that to guess the other. Thus, LZ77-style compression is out of the window, as well as using Huffman codes selected based on _all_ the header values. In essence, each header value (in a single request) has to be compressed independently. IIUC the dictionary you reference is used for header keys (as opposed to values).
[^] this statement is a bit of a lie for reasons of simplification