Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Placeholder] Proofs with duplicate HTTP headers should be treated as invalid #431

Open
themighty1 opened this issue Feb 9, 2024 · 0 comments

Comments

@themighty1
Copy link
Member

[Note: This is not an actual issue right now (Feb 2024) since tlsn-verifier does not parse HTTP yet. But this will become an issue once we add that functionality]

Having duplicate HTTP headers in a proof may cause ambiguity for the proof verifier.
Proofs with duplicate headers should be considered invalid, except for maybe the Cookie header.

We need to have the parser expose the info about the presence of duplicate headers as discussed in tlsnotary/tlsn-utils#23

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant