Peace, On Mon, Jun 7, 2021, 10:04 PM Stephane Bortzmeyer <[email protected]> wrote:
> > QUIC has a 0 connection ID that disallows migration, so you can do > > this if you want. > > I must confess that I was not aware of this possibility. (Anyway, the > client can always, unilaterally, tear down the connection and start a > new one.) > I believe this is something NoScript (and Brave) developers should strongly consider enforcing at all the sites where JS isn't turned on explicitly by the user. IDK if they're aware of the implications of HTTP/3 deployment, though. -- Töma >
