Subject: Re: [httpwg/http-extensions] Remove AUTOMATIC_USE (#480)

From: HTTP issue updates <[email-masked]>
Date: Fri, 02 Mar 2018 13:01:33 -0800

MikeBishop commented on this pull request.

> @@ -470,6 +486,10 @@ authentication request identifier, `Request-ID`. A peer that receives a
 error of type `PROTOCOL_ERROR`. Frames with identical request
 identifiers refer to the same `CERTIFICATE_REQUEST`.
 
+The `CERTIFICATE_NEEDED` frame MUST NOT be sent by servers prior to seeing the
+end of the client's request, and then MUST NOT be sent if the client included a

That's a good point.  The reason for that text is to ensure there's not a race, so the server doesn't send in ignorance of whether the client already included one.  (And therefore, doesn't get either side confused about whether the `USE_CERTIFICATE` is in response to the server's `CERTIFICATE_REQUIRED`.)

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/httpwg/http-extensions/pull/480#discussion_r171961353