diff options
author | Runxi Yu <me@runxiyu.org> | 2025-04-19 21:19:42 +0800 |
---|---|---|
committer | Runxi Yu <me@runxiyu.org> | 2025-04-19 21:19:42 +0800 |
commit | 08148b5c3c1081082fe589d62f2d879cac53bb42 (patch) | |
tree | 9c0fd828250253bc9e203b7fac8fae7eee14b552 /README.md | |
parent | README.md: Note possibility of length-extension attacks (diff) | |
download | powxy-08148b5c3c1081082fe589d62f2d879cac53bb42.tar.gz powxy-08148b5c3c1081082fe589d62f2d879cac53bb42.tar.zst powxy-08148b5c3c1081082fe589d62f2d879cac53bb42.zip |
Happy Eyeballs
Diffstat (limited to '')
-rw-r--r-- | README.md | 5 |
1 files changed, 3 insertions, 2 deletions
@@ -64,8 +64,9 @@ program provided near the HTML form, and submit their nonce manually. on the server. - If we stay with SHA-256, an HMAC or prepending solutions should be used instead of simply appending things; might have issues with length-extension. -- Safari on iOS and iPadOS seem to unpredictably make their requests from - different address families, which causes the challenge to fail. +- Some clients make requests from different address families, which causes the + challenge to fail. This seems to be known as + [Happy Eyeballs](https://en.wikipedia.org/wiki/Happy_Eyeballs). - Unix domain sockets. ## Build |