%% You should probably cite rfc9931 instead of this I-D. @techreport{ietf-httpbis-optimistic-upgrade-06, number = {draft-ietf-httpbis-optimistic-upgrade-06}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-httpbis-optimistic-upgrade/06/}, author = {Benjamin M. Schwartz}, title = {{Security Considerations for Optimistic Protocol Transitions in HTTP/1.1}}, pagetotal = 13, year = 2025, month = sep, day = 18, abstract = {In HTTP/1.1, the client can request a change to a new protocol on the existing connection. This document discusses the security considerations that apply to data sent by the client before this request is confirmed, and adds new requirements to RFC 9112 and RFC 9298 to avoid related security issues.}, }