SLIDE 1
Protocol-to-Origin
Brian Sniffen Mike Bishop Erik Nygren Rich Salz
Protocol-to-Origin Brian Sni ff en Mike Bishop Erik Nygren Rich - - PowerPoint PPT Presentation
Protocol-to-Origin Brian Sni ff en Mike Bishop Erik Nygren Rich - - PowerPoint PPT Presentation
Protocol-to-Origin Brian Sni ff en Mike Bishop Erik Nygren Rich Salz Current State Who might use it? Who might use it? How to use it safely HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 123 Protocol-To-Origin: cleartext
SLIDE 2
SLIDE 3
Who might use it?
SLIDE 4
Who might use it?
SLIDE 5
How to use it safely
HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 123 Protocol-To-Origin: cleartext :status = 200 content-type = image/jpeg content-length = 123 protocol-to-origin = postquantum
SLIDE 6
How to use it safely
- GET only
- No /, /index.html, /index
- Strip some unsafe things
Cookies? query parameters? other headers?