The secret message hidden in every HTTP/2 connection

Re:The secret message hidden in every HTTP/2 connection by mrb on Monday November 30, 2015 @09:35AM (#10649567)

"PRISM" is obviously a reference to the surveillance program. HTTP/2.0 developers were well aware and worried about it. For example see this mail from PHK on the httpbis mailing list: http://www.ietf.org/mail-archive/web/httpbisa/current/msg142...

[ Parent | on HN ]

Re:The secret message hidden in every HTTP/2 connection by noselasd on Monday November 30, 2015 @10:11AM (#10649750)

The HTTP/2 spec is done on https://github.com/http2/http2-spec, this particular change seem to be quietly introduced here:

    commit ac468f3fab9f7092a430eedfd69ee1fb2e23c944
    Author: Martin Thomson <[email protected]>
    Date:   Fri Jun 14 13:14:02 2013 -0700

        Exercising editorial discretion regarding magic.

     diff --git a/draft-ietf-httpbis-http2.xml b/draft-ietf-httpbis-http2.xml
    index 58bbc27..f1e570d 100644
    --- a/draft-ietf-httpbis-http2.xml
    +++ b/draft-ietf-httpbis-http2.xml
    @@ -385,9 +385,9 @@ Upgrade: HTTP/2.0
               The client connection header is a sequence of 24 octets (in hex notation)
             </t>
             <figure><artwork type="inline">
    -535441202a20485454502f322e300d0a0d0a52540d0a0d0a</artwork></figure>
    +505249202a20485454502f322e300d0a0d0a534d0d0a0d0a</artwork></figure>
             <t>
    -          (the string <spanx style="verb">STA * HTTP/2.0\r\n\r\nRT\r\n\r\n</spanx>) followed by a
    +          (the string <spanx style="verb">PRI * HTTP/2.0\r\n\r\nSM\r\n\r\n</spanx>) followed by a
               <xref target="SETTINGS">SETTINGS frame</xref>.  The client sends the client connection header
               immediately upon receipt of a 101 Switching Protocols response (indicating a successful
               upgrade), or after receiving a TLS Finished message from the server. If starting an

[ Parent | on HN ]

Re:The secret message hidden in every HTTP/2 connection by mkjaer on Monday November 30, 2015 @10:36AM (#10649878)

The commit on GitHub, for anyone interested: https://github.com/http2/http2-spec/commit/ac468f3fab9f7092a...

[ Parent | on HN ]

Re:The secret message hidden in every HTTP/2 connection by djsumdog on Monday November 30, 2015 @10:55AM (#10650003)

Yea, looks like an inside joke / silent protest.

[ Parent | on HN ]

Re:The secret message hidden in every HTTP/2 connection by fpp on Monday November 30, 2015 @11:50AM (#10650306)

The date (14-Jun-2013) would fit.

"... The disclosures were published by The Guardian and The Washington Post on June 6, 2013. Subsequent documents have demonstrated a financial arrangement between ... "

[https://en.wikipedia.org/wiki/PRISM_%28surveillance_program%...]

[ Parent | on HN ]

Re:The secret message hidden in every HTTP/2 connection by aquassaut on Monday November 30, 2015 @02:28PM (#10651181)

Not too important but the article misses the FOO-BAR to FOO-BA to STA-RT transition, and the related issue (https://github.com/http2/http2-spec/issues/101)

[ Parent | on HN ]