Improve comment on rtt0 mitigation.

strarsis · strarsis · commit 42dfa5e6be66 · 2026-01-18T15:36:42.000+01:00
diff --git a/roles/wordpress-setup/templates/includes/directive-only/http3-rtt0.conf b/roles/wordpress-setup/templates/includes/directive-only/http3-rtt0.conf
@@ -2,7 +2,7 @@
 ssl_early_data on;
 proxy_set_header Early-Data $ssl_early_data;
 
-# Reject early data for unsafe methods
+# HTTP/3 Early-Data/0-RTT replay attack mitigration for non-GET requests
 if ($ssl_early_data = 1 && $request_method !~ ^(GET|HEAD|OPTIONS)$) {
     return 425;
 }

Original file line number	Diff line number	Diff line change
`@@ -2,7 +2,7 @@`
`2`	`2`	`ssl_early_data on;`
`3`	`3`	`proxy_set_header Early-Data $ssl_early_data;`
`4`	`4`
`5`		`-# Reject early data for unsafe methods`
	`5`	`+# HTTP/3 Early-Data/0-RTT replay attack mitigration for non-GET requests`
`6`	`6`	`if ($ssl_early_data = 1 && $request_method !~ ^(GET\|HEAD\|OPTIONS)$) {`
`7`	`7`	`return 425;`
`8`	`8`	`}`