TODO: Allow SAN names in HTTP/2 server push

Suggested-by: Nicolas Grekas

diff --git a/docs/TODO b/docs/TODO
index 975c52dd35f7c3a102c4b12ffc279c452011b67d..3a6e4575bf9cc699f610a78209027e9342802971 100644 (file)
--- a/docs/TODO
+++ b/docs/TODO
@@ -72,6 +72,7 @@
  5.1 Better persistency for HTTP 1.0
  5.2 support FF3 sqlite cookie files
  5.3 Rearrange request header order
+ 5.4 Allow SAN names in HTTP/2 server push
  5.5 auth= in URLs
  5.6 Refuse "downgrade" redirects
  5.7 QUIC
@@ -595,6 +596,15 @@
  headers use a default value so only headers that need to be moved have to be
  specified.
 
+5.4 Allow SAN names in HTTP/2 server push
+
+ curl only allows HTTP/2 push promise if the provided :autority header value
+ exactly matches the host name given in the URL. It could be extended to allow
+ any name that would match the Subject Alternative Names in the server's TLS
+ certificate.
+
+ See https://github.com/curl/curl/pull/3581
+
 5.5 auth= in URLs
 
  Add the ability to specify the preferred authentication mechanism to use by