Skip to content

Commit ab1dc7e

Browse files
committed
Fix references to TLS Alerts elsewhere in the text
1 parent 39a29d3 commit ab1dc7e

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

draft-ietf-httpbis-connect-tcp.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -207,7 +207,7 @@ The mandatory behaviors above enable endpoints to detect any truncation of incom
207207
+-+-----+ +-+----------+ +----------+-+ +-----+-+
208208
+---"abc"--->+-------DATA{"abc"}------->+---"abc"--->|
209209
| | (... timeout @ A ...) | |
210-
| +--------TLS Alert-------->+----RST---->|
210+
| +--FIN (no close_notify)-->+----RST---->|
211211
| | | |
212212
~~~
213213
{: title="Timeout example (HTTP/1.1)"}
@@ -294,7 +294,7 @@ A malicious client can achieve cause highly asymmetric resource usage at the pro
294294
While this specification is fully functional under HTTP/1.1, performance-sensitive deployments SHOULD use HTTP/2 or HTTP/3 instead. When using HTTP/1.1:
295295

296296
* Each CONNECT request requires a new TCP and TLS connection, imposing a higher cost in setup latency, congestion control convergence, CPU time, and data transfer.
297-
* It may be difficult to implement the recommended unclean shutdown signals ({{closing-connections}}), as many TLS libraries do not support injecting TLS Alerts.
297+
* It may be difficult to implement the recommended unclean shutdown signals ({{closing-connections}}), as TLS subsystems may close connections gracefully even when this is not desired.
298298
* The number of active connections through each client may be limited by the number of available TCP client ports, especially if:
299299
- The client only has one IP address that can be used to reach the proxy.
300300
- The client is shared between many parties, such as when acting as a gateway or concentrator.

0 commit comments

Comments
 (0)