fmaury/seirdy.one
1
0
Fork 0
mirror of https://git.sr.ht/~seirdy/seirdy.one synced 2024-09-19 20:02:10 +00:00
Code Issues Projects Releases Wiki Activity

syndicate

Browse source
This commit is contained in:
Rohan Kumar 2023-08-03 21:14:57 -07:00
parent 2ca017f326
commit be3d0e5576
No known key found for this signature in database
GPG key ID: 1E892DB2A5F84479
1 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
content/notes/permissions-policy-header-bloat.md
View file

@ -6,11 +6,11 @@ replyTitle: "I think we should be comparing wins relative to HTTP/3 with the lat
replyType: "DiscussionForumPosting"
replyAuthor: "Anne van Kesteren"
replyAuthorURI: "https://annevankesteren.nl/"
#syndicatedCopies:
# - title: 'GitHub'
# url: ''
# - title: 'The Fediverse'
# url: ''
syndicatedCopies:
- title: 'GitHub'
url: 'https://github.com/w3c/webappsec-permissions-policy/issues/481#issuecomment-1259139696'
- title: 'The Fediverse'
url: 'https://pleroma.envs.net/notice/AYNLYfnnAejTPh4csa'
---
I'm a browser "with the latest in header compression", fetching a web page. I race a TCP-based ALPN run against an HTTPS record lookup (Chromium's behavior). Either the HTTP/2 ALPN wins the race, or the HTTPS DNS record does not exist. Both are, and will remain, common scenarios. So I fetch the page over HTTP/2. This is the initial request; dynamic HPACK hasn't kicked in. I download a 1.56kb HTTP response header: