Skip to content

Commit 2ae9e90

Browse files
LPardueMikeBishop
andauthored
Add some AD suggested wording to content coding decoding discussion (#3367)
I think it captures what was described in the issue and on the subsequent PR. Fixes #3356 --------- Co-authored-by: Mike Bishop <[email protected]>
1 parent 9dee118 commit 2ae9e90

File tree

1 file changed

+9
-5
lines changed

1 file changed

+9
-5
lines changed

draft-ietf-httpbis-unencoded-digest.md

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -236,11 +236,15 @@ needs to decode all encodings in order before validation.
236236

237237
Since the digest is calculated on unencoded representation bytes, validation of
238238
a message with content codings (as described above) can only succeed where the
239-
decoded output produces the same byte sequence as the input. While many
240-
registered content codings behave this way, there is no requirement for them to
241-
do so and it remains a possibility that decoding could produce a
242-
different byte sequence. In order to avoid unintended validation failures, care
243-
is advised when selecting content codings for use with `Unencoded-Digest`.
239+
decoded output produces the same byte sequence as the input. While {{Section
240+
8.4.1 of !HTTP=RFC9110}} describes content codings to operate "without loss of
241+
information", that doesn't necessarily mean a byte-for-byte equivalence. A
242+
content coding could perform semantically-meaningless
243+
transformations that nevertheless result in a decoded byte sequence that does
244+
not exactly match the original unencoded representation. In order to avoid
245+
unintended validation failures, care is advised when selecting content codings
246+
for use with `Unencoded-Digest`; that said, most registered content codings do provide
247+
byte-for-byte equivalence and are appropriate.
244248

245249

246250
# Integrity Fields are Complementary

0 commit comments

Comments
 (0)