Mark Nottingham

icon indicating a website link https://www.mnot.net/

icon location Melbourne, Australia icon location I work on the Internet.

Results 474 comments of Mark Nottingham

Show where bytes can be saved

Maybe an "efficiency" view?

Alert on whitespace before colon in headers

Because some implementations will treat a header named "Foo" differently than one named "Foo ", and this can enable attacks like HTTP response smuggling. See http://tools.ietf.org/html/draft-ietf-httpbis-p1-messaging-11#section-3.2

Alert on whitespace before colon in headers

Use thor.error.HeaderSpaceError

Alert on whitespace before colon in headers

The header isn't highlighted, probably because of the whitespace.

Request: Response Headers can be sorted As-Is, Alphabetically

Sounds reasonable.

Support alternate input

EricL says HAR would be good enough for now.

HTTPS-specific checks

Looking at the state of SSL support in Python, my hopes aren't high. Specifically, it looks like making it non-blocking is going to be challenging, although the Twisted folks have...

HTTPS-specific checks

Preliminary support is now in Thor; no changes needed in RED to take advantage of it. Note that certificates are not checked, nor are any other SSL-specfic checks made (yet).

HTTPS-specific checks

HTTPS-related checks: - v2/v3/tls - HttpOnly cookies - cert validation (expiration, domain match, etc.) - ca quality - cipher strength - HSTS

HTTPS-specific checks

Also, suggest Cache-Control: public (as per UserVoice feedback)