Memory and forgetting - Githubissues

MikeBishop / http2-certs

Enabling client certificate authentication in HTTP/2

3 stars 2 forks source link

Memory and forgetting #10

Open MikeBishop opened 8 years ago

MikeBishop commented 8 years ago

Requiring the peer to cache everything you send for the lifetime of the connection invites DoS attacks on memory consumption with giant/numerous (possibly fake) certs. There should be a way to signal that a certificate/request has been discarded; senders would need to re-send if they want to use in the future.

martinthomson commented 7 years ago

I think that a simple CERTIFICATE_REQUEST is the way that we do this.