diff --git a/auth48/draft-ietf-masque-connect-ip.html b/auth48/draft-ietf-masque-connect-ip.html index 278e070..31855da 100644 --- a/auth48/draft-ietf-masque-connect-ip.html +++ b/auth48/draft-ietf-masque-connect-ip.html @@ -3024,7 +3024,7 @@

HTTP/1.x because a server could reject the HTTP Upgrade and attempt to parse the IP packets as a subsequent HTTP request, allowing request smuggling attacks; see [OPTIMISTIC]. In -particular, an intermediary that re-encode a request from HTTP/2 or 3 to +particular, an intermediary that re-encodes a request from HTTP/2 or 3 to HTTP/1.1 MUST NOT forward any received capsules until it has parsed a successful response.ΒΆ

diff --git a/auth48/draft-ietf-masque-connect-ip.txt b/auth48/draft-ietf-masque-connect-ip.txt index 1480cea..a8f17f2 100644 --- a/auth48/draft-ietf-masque-connect-ip.txt +++ b/auth48/draft-ietf-masque-connect-ip.txt @@ -1540,8 +1540,8 @@ Table of Contents in HTTP/1.x because a server could reject the HTTP Upgrade and attempt to parse the IP packets as a subsequent HTTP request, allowing request smuggling attacks; see [OPTIMISTIC]. In particular, - an intermediary that re-encode a request from HTTP/2 or 3 to HTTP/1.1 - MUST NOT forward any received capsules until it has parsed a + an intermediary that re-encodes a request from HTTP/2 or 3 to + HTTP/1.1 MUST NOT forward any received capsules until it has parsed a successful response. 12. IANA Considerations