search

mozilla / rust-ece

Encrypted Content-Encoding for HTTP (RFC 8188) Rust implementation
Mozilla Public License 2.0
25 stars 11 forks source link

Remove very old draft ece-03 support #53

Open jrconlin opened 3 years ago

jrconlin commented 3 years ago

Data using this encoding format is very old and should no longer be supported. This may require some coordination with the Autopush Endpoint server to simply block incoming requests with appropriate messaging.

jrconlin commented 3 years ago

In case folk are curious, this is what the server sees:

image

https://github.com/mozilla-services/autopush-rs/issues/266

rfk commented 3 years ago

If I'm understanding correctly, the ece-03 draft defines the aesgcm encoding, which the graph above suggests is (unfortunately!) the most commonly used. The unused aesgcm128 scheme seems to come from an earlier thomson-02 draft, and as noted in issue comment here I don't think it is supported by this crate.

I think that, happily, we don't have anything to do here (although Desktop does, ref Bug 1230038). But I could easily be lost in the web of specs here, and would appreciate a second opinion on the chain of reasoning here and in the issue comment linked above.