Skip to content

Commit e7ef316

Browse files
committed
[optimistic-upgrade] Avoid "logical converse" formulation
1 parent cf9d357 commit e7ef316

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

draft-ietf-httpbis-optimistic-upgrade.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -98,9 +98,9 @@ After rejecting a request, the server will continue to interpret bytes received
9898
> A client cannot begin using an upgraded protocol on the connection until it has completely sent the request message (i.e., the client can't change the protocol it is sending in the middle of a message).
9999
{:quote quotedFrom="HTTP, Section 7.8" cite="https://www.rfc-editor.org/rfc/rfc9110.html#section-7.8-15"}
100100

101-
However, because of the possibility of rejection, the converse is not true: a client cannot necessarily begin using a new protocol merely because it has finished sending the corresponding request message.
101+
In other words, completion of the request message is a **necessary** condition for the client to begin using the new protocol. However, it is important to clarify that this is not a **sufficient** condition, because the server might reject the request.
102102

103-
In some cases, the client might predict that the protocol transition is likely to succeed. For example, if a request using an upgrade token recently succeeded, the client might expect that that subsequent requests with the same upgrade token will also succeed. If this expectation is correct, the client can often reduce delay by immediately sending the first bytes of the new protocol "optimistically", without waiting for the server's response. This document explores the security implications of this "optimistic" behavior.
103+
In some cases, the client might predict that the server is likely to accept a requested protocol transition. For example, if a request using an upgrade token recently succeeded, the client might expect that subsequent requests with the same upgrade token will also succeed. If this expectation is correct, the client can often reduce delay by immediately sending the first bytes of the new protocol "optimistically", without waiting for the server's response. This document explores the security implications of this "optimistic" behavior.
104104

105105
# Possible Security Issues
106106

0 commit comments

Comments
 (0)