Subject: [httpwg/http-extensions] MitM detection (#617)

From: HTTP issue updates <[email-masked]>
Date: Wed, 09 May 2018 19:15:39 -0700

Secondary certs depends on there not being a MitM.  And sadly, they still exist in some places.

Now, as an advisory extra, the failure mode isn't fatal to the connection, but it could mean a lot of wasted effort.  So we could pack the setting with 32 bits extracted from the exporter as confirmation that the mechanism works, or design a new mechanism to reduce the chance that we waste effort on creating authenticators that we can't use.

Either way, it's probably worth mentioning this possibility.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/httpwg/http-extensions/issues/617