Mercurial > hg > nginx-quic
comparison .hgtags @ 8661:db6b630e6086
HTTP: connections with wrong ALPN protocols are now rejected.
This is a recommended behavior by RFC 7301 and is useful
for mitigation of protocol confusion attacks [1].
To avoid possible negative effects, list of supported protocols
was extended to include all possible HTTP protocol ALPN IDs
registered by IANA [2], i.e. "http/1.0" and "http/0.9".
[1] https://alpaca-attack.com/
[2] https://www.iana.org/assignments/tls-extensiontype-values/
author | Vladimir Homutov <vl@nginx.com> |
---|---|
date | Wed, 20 Oct 2021 09:50:02 +0300 |
parents | a525013b8296 |
children | 82b750b20c52 |
comparison
equal
deleted
inserted
replaced
8660:b9e02e9b2f1d | 8661:db6b630e6086 |
---|