-
-
Notifications
You must be signed in to change notification settings - Fork 33.2k
Closed
Labels
feature requestIssues that request new features to be added to Node.js.Issues that request new features to be added to Node.js.http2Issues or PRs related to the http2 subsystem.Issues or PRs related to the http2 subsystem.
Description
As part of the HTTP2 (and HTTP3) spec, some headers can be sent as Literal Header Field Never Indexed
https://www.rfc-editor.org/rfc/rfc7541.html#section-6.2.3
This can be used for security reasons to avoid CRIME
(Compression Ratio Info-leak Made Easy) attacks to expose sensitive information.
Points of interest are:
It'll help diagnose #28632
Metadata
Metadata
Assignees
Labels
feature requestIssues that request new features to be added to Node.js.Issues that request new features to be added to Node.js.http2Issues or PRs related to the http2 subsystem.Issues or PRs related to the http2 subsystem.