]> git.ipfire.org Git - thirdparty/squid.git/commit - src/HttpHeader.cc
Alternate-Protocol is a hop-by-hop header
authorAmos Jeffries <squid3@treenet.co.nz>
Tue, 18 Nov 2014 10:13:39 +0000 (02:13 -0800)
committerAmos Jeffries <squid3@treenet.co.nz>
Tue, 18 Nov 2014 10:13:39 +0000 (02:13 -0800)
commitec9d1de5364ce617b09c3c4fe1c3ad2215e55f7b
tree1163b27e92c12765ade61f037e6882dcf8c68bfa
parentbe683c55c9a4674bbe2ea27ae6f79cabe70838c1
Alternate-Protocol is a hop-by-hop header

Google are pushing Alternate-Protocol header to arbitrarily move clients
from HTTP to their experimental and proprietary protocols.

When relayed through a proxy this can cause traffic bifurcation with
side effects ranging from client visible failures, to traffic increase
on the network as proxy caching is bypassed, to security vulnerabilities
or privacy information leaks over the experimental protocol.

Treating the Alternate-Protocol header as a hop-by-hop header only
relevant on client->origin connections we can both prevent the above
issues occuring on networks utilizing a proxy, and also participate in
the protocol exprimentation process ourselves.
src/HttpHeader.cc
src/http/RegisteredHeaders.h