From fda38086f598fb3b5b41c0b94350c3d937bd90e6 Mon Sep 17 00:00:00 2001
From: Jan-Ivar Bruaroey <jan-ivar@users.noreply.github.com>
Date: Tue, 23 May 2023 23:27:40 +0000
Subject: [PATCH] Merge pull request #489 from nidhijaju/certhash-notsupported

SHA: fefcd4d0c9abf2c6851045f536f63fde4cf03175
Reason: push, by jan-ivar

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 index.html | 50 ++++++++++++++++++++++++++------------------------
 1 file changed, 26 insertions(+), 24 deletions(-)

diff --git a/index.html b/index.html
index c70233e7..38a026a7 100644
--- a/index.html
+++ b/index.html
@@ -9,7 +9,7 @@
   <link href="https://www.w3.org/2008/site/images/favicon.ico" rel="icon">
   <meta content="Bikeshed version 3383f409d, updated Fri Apr 28 15:49:22 2023 -0700" name="generator">
   <link href="https://www.w3.org/TR/webtransport/" rel="canonical">
-  <meta content="09b05771f32389f6e5f809e71db2cde17ec4c058" name="document-revision">
+  <meta content="fefcd4d0c9abf2c6851045f536f63fde4cf03175" name="document-revision">
 <style>/* style-autolinks */
 .css.css, .property.property, .descriptor.descriptor {
     color: var(--a-normal-text);
@@ -1388,7 +1388,7 @@ <h3 class="heading settled" data-level="5.2" id="webtransport-constructor"><span
      <li data-md>
       <p>Let <var>serverCertificateHashes</var> be <code class="idl"><a data-link-type="idl" href="#dom-webtransport-webtransport-url-options-options" id="ref-for-dom-webtransport-webtransport-url-options-options①">options</a></code>'s <code class="idl"><a data-link-type="idl" href="#dom-webtransportoptions-servercertificatehashes" id="ref-for-dom-webtransportoptions-servercertificatehashes">serverCertificateHashes</a></code> if it exists, and null otherwise.</p>
      <li data-md>
-      <p>If <var>dedicated</var> is false and <var>serverCertificateHashes</var> is non-null, then <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#dfn-throw" id="ref-for-dfn-throw⑦">throw</a> a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#exceptiondef-typeerror" id="ref-for-exceptiondef-typeerror②">TypeError</a></code>.</p>
+      <p>If <var>dedicated</var> is false and <var>serverCertificateHashes</var> is non-null, then <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#dfn-throw" id="ref-for-dfn-throw⑦">throw</a> a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#notsupportederror" id="ref-for-notsupportederror">NotSupportedError</a></code> exception.</p>
      <li data-md>
       <p>Let <var>requireUnreliable</var> be <code class="idl"><a data-link-type="idl" href="#dom-webtransport-webtransport-url-options-options" id="ref-for-dom-webtransport-webtransport-url-options-options②">options</a></code>'s <code class="idl"><a data-link-type="idl" href="#dom-webtransportoptions-requireunreliable" id="ref-for-dom-webtransportoptions-requireunreliable">requireUnreliable</a></code>.</p>
      <li data-md>
@@ -1466,13 +1466,14 @@ <h3 class="heading settled" data-level="5.2" id="webtransport-constructor"><span
      <li data-md>
       <p><a data-link-type="dfn" href="https://streams.spec.whatwg.org/#readablestream-set-up" id="ref-for-readablestream-set-up①">Set up</a> <var>transport</var>.<code class="idl"><a data-link-type="idl" href="#dom-webtransport-incomingunidirectionalstreams-slot" id="ref-for-dom-webtransport-incomingunidirectionalstreams-slot①">[[IncomingUnidirectionalStreams]]</a></code> with <a data-link-type="dfn" href="https://streams.spec.whatwg.org/#readablestream-set-up-pullalgorithm" id="ref-for-readablestream-set-up-pullalgorithm①">pullAlgorithm</a> set to <var>pullUnidirectionalStreamAlgorithm</var>, and <a data-link-type="dfn" href="https://streams.spec.whatwg.org/#readablestream-set-up-highwatermark" id="ref-for-readablestream-set-up-highwatermark②">highWaterMark</a> set to 0.</p>
      <li data-md>
-      <p><a data-link-type="dfn" href="#initialize-webtransport-over-http" id="ref-for-initialize-webtransport-over-http">Initialize WebTransport over HTTP</a> with <var>transport</var>, <var>parsedURL</var>, <var>dedicated</var>, <var>requireUnreliable</var>, and <var>congestionControl</var>.</p>
+      <p><a data-link-type="dfn" href="#initialize-webtransport-over-http" id="ref-for-initialize-webtransport-over-http">Initialize WebTransport over HTTP</a> with <var>transport</var>, <var>parsedURL</var>, <var>dedicated</var>, <var>requireUnreliable</var>, <var>congestionControl</var>, and <var>serverCertificateHashes</var>.</p>
      <li data-md>
       <p>Return <var>transport</var>.</p>
     </ol>
    </div>
    <div class="algorithm" data-algorithm="initialize WebTransport over HTTP">
-     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="initialize-webtransport-over-http">initialize WebTransport over HTTP</dfn>, given a <code class="idl"><a data-link-type="idl" href="#webtransport" id="ref-for-webtransport①②">WebTransport</a></code> object <var>transport</var>, a <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url" id="ref-for-concept-url①">URL record</a> <var>url</var>, a boolean <var>dedicated</var>, a boolean <var>http3Only</var>, and a <code class="idl"><a data-link-type="idl" href="#enumdef-webtransportcongestioncontrol" id="ref-for-enumdef-webtransportcongestioncontrol②">WebTransportCongestionControl</a></code> <var>congestionControl</var>, run these steps. 
+     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="initialize-webtransport-over-http">initialize WebTransport over HTTP</dfn>, given a <code class="idl"><a data-link-type="idl" href="#webtransport" id="ref-for-webtransport①②">WebTransport</a></code> object <var>transport</var>, a <a data-link-type="dfn" href="https://url.spec.whatwg.org/#concept-url" id="ref-for-concept-url①">URL record</a> <var>url</var>, a boolean <var>dedicated</var>, a boolean <var>http3Only</var>, a <code class="idl"><a data-link-type="idl" href="#enumdef-webtransportcongestioncontrol" id="ref-for-enumdef-webtransportcongestioncontrol②">WebTransportCongestionControl</a></code> <var>congestionControl</var>, and a
+sequence&lt;<code class="idl"><a data-link-type="idl" href="#dictdef-webtransporthash" id="ref-for-dictdef-webtransporthash">WebTransportHash</a></code>> <var>serverCertificateHashes</var>, run these steps. 
     <ol>
      <li data-md>
       <p>Let <var>client</var> be <var>transport</var>’s <a data-link-type="dfn" href="https://html.spec.whatwg.org/multipage/webappapis.html#relevant-settings-object" id="ref-for-relevant-settings-object">relevant settings object</a>.</p>
@@ -1502,7 +1503,10 @@ <h3 class="heading settled" data-level="5.2" id="webtransport-constructor"><span
         <p>Let <var>newConnection</var> be "<code>no</code>" if <var>dedicated</var> is false; otherwise "<code>yes-and-dedicated</code>".</p>
        <li data-md>
         <p>Let <var>connection</var> be the result of <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-connection-obtain" id="ref-for-concept-connection-obtain">obtaining a connection</a> with <var>networkPartitionKey</var>, <var>url</var>, false, <var>newConnection</var>, and <var>http3Only</var>. If the user agent
- supports more than one congestion control algorithm, choose one appropriate for <var>congestionControl</var> for sending of data on this <var>connection</var>.</p>
+ supports more than one congestion control algorithm, choose one appropriate for <var>congestionControl</var> for sending of data on this <var>connection</var>. When obtaining a connection, if <var>serverCertificateHashes</var> is specified, instead of using the default certificate verification
+ algorithm, consider the certificate valid if it meets the <a data-link-type="dfn" href="#custom-certificate-requirements" id="ref-for-custom-certificate-requirements">custom certificate
+ requirements</a> and if <a data-link-type="dfn" href="#verify-a-certificate-hash" id="ref-for-verify-a-certificate-hash">verifying the certificate hash</a> against <var>serverCertificateHashes</var> returns true. If either condition is not met, let <var>connection</var> be
+ failure.</p>
        <li data-md>
         <p>If <var>connection</var> is failure, then abort the remaining steps and <a data-link-type="dfn" href="#webtransport-queue-a-network-task" id="ref-for-webtransport-queue-a-network-task④">queue a network task</a> with <var>transport</var> to run these steps:</p>
         <ol>
@@ -1982,7 +1986,7 @@ <h3 class="heading settled" data-level="5.9" id="web-transport-configuration"><s
 <c- b>dictionary</c-> <a class="idl-code" data-link-type="dictionary" href="#dictdef-webtransportoptions" id="ref-for-dictdef-webtransportoptions①"><c- g>WebTransportOptions</c-></a> {
   <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-boolean" id="ref-for-idl-boolean"><c- b>boolean</c-></a> <a class="idl-code" data-default="false" data-link-type="dict-member" data-type="boolean " href="#dom-webtransportoptions-allowpooling" id="ref-for-dom-webtransportoptions-allowpooling①"><c- g>allowPooling</c-></a> = <c- b>false</c->;
   <a class="idl-code" data-link-type="interface" href="https://webidl.spec.whatwg.org/#idl-boolean" id="ref-for-idl-boolean①"><c- b>boolean</c-></a> <a class="idl-code" data-default="false" data-link-type="dict-member" data-type="boolean " href="#dom-webtransportoptions-requireunreliable" id="ref-for-dom-webtransportoptions-requireunreliable①"><c- g>requireUnreliable</c-></a> = <c- b>false</c->;
-  <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#idl-sequence" id="ref-for-idl-sequence"><c- b>sequence</c-></a>&lt;<a data-link-type="idl-name" href="#dictdef-webtransporthash" id="ref-for-dictdef-webtransporthash"><c- n>WebTransportHash</c-></a>> <a class="idl-code" data-link-type="dict-member" data-type="sequence<WebTransportHash> " href="#dom-webtransportoptions-servercertificatehashes" id="ref-for-dom-webtransportoptions-servercertificatehashes①"><c- g>serverCertificateHashes</c-></a>;
+  <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#idl-sequence" id="ref-for-idl-sequence"><c- b>sequence</c-></a>&lt;<a data-link-type="idl-name" href="#dictdef-webtransporthash" id="ref-for-dictdef-webtransporthash①"><c- n>WebTransportHash</c-></a>> <a class="idl-code" data-link-type="dict-member" data-type="sequence<WebTransportHash> " href="#dom-webtransportoptions-servercertificatehashes" id="ref-for-dom-webtransportoptions-servercertificatehashes①"><c- g>serverCertificateHashes</c-></a>;
   <a data-link-type="idl-name" href="#enumdef-webtransportcongestioncontrol" id="ref-for-enumdef-webtransportcongestioncontrol④"><c- n>WebTransportCongestionControl</c-></a> <a class="idl-code" data-default="&quot;default&quot;" data-link-type="dict-member" data-type="WebTransportCongestionControl " href="#dom-webtransportoptions-congestioncontrol" id="ref-for-dom-webtransportoptions-congestioncontrol①"><c- g>congestionControl</c-></a> = "default";
 };
 
@@ -2003,14 +2007,14 @@ <h3 class="heading settled" data-level="5.9" id="web-transport-configuration"><s
     <dd data-md>
      <p>When set to true, the WebTransport connection cannot be established over HTTP/2 if
  an HTTP/3 connection is not possible.</p>
-    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="WebTransportOptions" data-dfn-type="dict-member" data-export id="dom-webtransportoptions-servercertificatehashes"><code>serverCertificateHashes</code></dfn>, <span> of type sequence&lt;<a data-link-type="idl-name" href="#dictdef-webtransporthash" id="ref-for-dictdef-webtransporthash①">WebTransportHash</a>></span>
+    <dt data-md><dfn class="dfn-paneled idl-code" data-dfn-for="WebTransportOptions" data-dfn-type="dict-member" data-export id="dom-webtransportoptions-servercertificatehashes"><code>serverCertificateHashes</code></dfn>, <span> of type sequence&lt;<a data-link-type="idl-name" href="#dictdef-webtransporthash" id="ref-for-dictdef-webtransporthash②">WebTransportHash</a>></span>
     <dd data-md>
      <p>This option is only supported for transports using dedicated connections.
  For transport protocols that do not support this feature, having this
- field non-empty SHALL result in a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#notsupportederror" id="ref-for-notsupportederror">NotSupportedError</a></code> exception being thrown.</p>
+ field non-empty SHALL result in a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#notsupportederror" id="ref-for-notsupportederror①">NotSupportedError</a></code> exception being thrown.</p>
     <dd data-md>
      <p>If supported and non-empty, the user agent SHALL deem a server certificate
- trusted if and only if it can successfully <a data-link-type="dfn" href="#verify-a-certificate-hash" id="ref-for-verify-a-certificate-hash">verify a certificate hash</a> against <code class="idl"><a data-link-type="idl" href="#dom-webtransportoptions-servercertificatehashes" id="ref-for-dom-webtransportoptions-servercertificatehashes②">serverCertificateHashes</a></code> and satisfies <a data-link-type="dfn" href="#custom-certificate-requirements" id="ref-for-custom-certificate-requirements">custom certificate requirements</a>.  The user agent SHALL
+ trusted if and only if it can successfully <a data-link-type="dfn" href="#verify-a-certificate-hash" id="ref-for-verify-a-certificate-hash①">verify a certificate hash</a> against <code class="idl"><a data-link-type="idl" href="#dom-webtransportoptions-servercertificatehashes" id="ref-for-dom-webtransportoptions-servercertificatehashes②">serverCertificateHashes</a></code> and satisfies <a data-link-type="dfn" href="#custom-certificate-requirements" id="ref-for-custom-certificate-requirements①">custom certificate requirements</a>.  The user agent SHALL
  ignore any hash that uses an unknown <code class="idl"><a data-link-type="idl" href="#dom-webtransporthash-algorithm" id="ref-for-dom-webtransporthash-algorithm">algorithm</a></code>.
  If empty, the user agent SHALL use certificate verification procedures it would
  use for normal <a data-link-type="dfn" href="https://fetch.spec.whatwg.org/#concept-fetch" id="ref-for-concept-fetch">fetch</a> operations.</p>
@@ -2029,33 +2033,31 @@ <h3 class="heading settled" data-level="5.9" id="web-transport-configuration"><s
      </div>
    </dl>
    <div class="algorithm" data-algorithm="compute a certificate hash">
-     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="compute-a-certificate-hash">compute a certificate hash</dfn>, do the following: 
+     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="compute-a-certificate-hash">compute a certificate hash</dfn>, given a <var>certificate</var>, perform the following steps: 
     <ol>
      <li data-md>
-      <p>Let <var>cert</var> be the input certificate, represented as a DER encoding of
+      <p>Let <var>cert</var> be <var>certificate</var>, represented as a DER encoding of
  Certificate message defined in <a data-link-type="biblio" href="#biblio-rfc5280" title="Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile">[RFC5280]</a>.</p>
      <li data-md>
       <p>Compute the SHA-256 hash of <var>cert</var> and return the computed value.</p>
     </ol>
    </div>
    <div class="algorithm" data-algorithm="verify a certificate hash">
-     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="verify-a-certificate-hash">verify a certificate hash</dfn>, do the following: 
+     To <dfn class="dfn-paneled" data-dfn-type="dfn" data-noexport id="verify-a-certificate-hash">verify a certificate hash</dfn>, given a <var>certificate</var> and an array of hashes <var>hashes</var>,
+perform the following steps: 
     <ol>
      <li data-md>
-      <p>Let <var>hashes</var> be the input array of hashes.</p>
-     <li data-md>
-      <p>Let <var>referenceHash</var> be the <a data-link-type="dfn" href="#compute-a-certificate-hash" id="ref-for-compute-a-certificate-hash">computed hash</a> of the input certificate.</p>
+      <p>Let <var>referenceHash</var> be the result of <a data-link-type="dfn" href="#compute-a-certificate-hash" id="ref-for-compute-a-certificate-hash">computing a certificate hash</a> with <var>certificate</var>.</p>
      <li data-md>
       <p>For every hash <var>hash</var> in <var>hashes</var>:</p>
       <ol>
        <li data-md>
-        <p>If <var>hash</var>.<code class="idl"><a data-link-type="idl" href="#dom-webtransporthash-value" id="ref-for-dom-webtransporthash-value">value</a></code> is not null:</p>
+        <p>If <var>hash</var>.<code class="idl"><a data-link-type="idl" href="#dom-webtransporthash-value" id="ref-for-dom-webtransporthash-value">value</a></code> is not null and <var>hash</var>.<code class="idl"><a data-link-type="idl" href="#dom-webtransporthash-algorithm" id="ref-for-dom-webtransporthash-algorithm①">algorithm</a></code> is an <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ascii-case-insensitive" id="ref-for-ascii-case-insensitive">ASCII case-insensitive</a> match with "sha-256":</p>
         <ol>
          <li data-md>
           <p>Let <var>hashValue</var> be the byte sequence which <var>hash</var>.<code class="idl"><a data-link-type="idl" href="#dom-webtransporthash-value" id="ref-for-dom-webtransporthash-value①">value</a></code> represents.</p>
          <li data-md>
-          <p>If <code class="idl"><a data-link-type="idl" href="#dom-webtransporthash-algorithm" id="ref-for-dom-webtransporthash-algorithm①">algorithm</a></code> of <var>hash</var> is an <a data-link-type="dfn" href="https://infra.spec.whatwg.org/#ascii-case-insensitive" id="ref-for-ascii-case-insensitive">ASCII case-insensitive</a> match with "sha-256", and <var>hashValue</var> is equal
-  to <var>referenceHash</var>, the certificate is valid. Return true.</p>
+          <p>If <var>hashValue</var> is equal to <var>referenceHash</var>, return true.</p>
         </ol>
       </ol>
      <li data-md>
@@ -2354,7 +2356,7 @@ <h3 class="heading settled" data-level="6.4" id="send-stream-procedures"><span c
      <li data-md>
       <p>Let <var>transport</var> be <var>stream</var>.<code class="idl"><a data-link-type="idl" href="#dom-webtransportsendstream-transport-slot" id="ref-for-dom-webtransportsendstream-transport-slot①">[[Transport]]</a></code>.</p>
      <li data-md>
-      <p>If <var>chunk</var> is not a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#BufferSource" id="ref-for-BufferSource②">BufferSource</a></code>, return <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#a-promise-rejected-with" id="ref-for-a-promise-rejected-with③">a promise rejected with</a> a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#exceptiondef-typeerror" id="ref-for-exceptiondef-typeerror③">TypeError</a></code>.</p>
+      <p>If <var>chunk</var> is not a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#BufferSource" id="ref-for-BufferSource②">BufferSource</a></code>, return <a data-link-type="dfn" href="https://webidl.spec.whatwg.org/#a-promise-rejected-with" id="ref-for-a-promise-rejected-with③">a promise rejected with</a> a <code class="idl"><a data-link-type="idl" href="https://webidl.spec.whatwg.org/#exceptiondef-typeerror" id="ref-for-exceptiondef-typeerror②">TypeError</a></code>.</p>
      <li data-md>
       <p>Let <var>promise</var> be a new promise.</p>
      <li data-md>
@@ -4340,12 +4342,12 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['7d1e68b7'] = {"dfnID": "7d1e68b7", "url": "https://webidl.spec.whatwg.org/#idl-DataView", "dfnText": "DataView", "refSections": [{"refs": [{"id": "ref-for-idl-DataView"}], "title": "4.3. Procedures"}], "external": true};
 window.dfnpanelData['889e932f'] = {"dfnID": "889e932f", "url": "https://webidl.spec.whatwg.org/#Exposed", "dfnText": "Exposed", "refSections": [{"refs": [{"id": "ref-for-Exposed"}], "title": "4. WebTransportDatagramDuplexStream Interface"}, {"refs": [{"id": "ref-for-Exposed\u2460"}], "title": "5. WebTransport Interface"}, {"refs": [{"id": "ref-for-Exposed\u2461"}], "title": "6. Interface WebTransportSendStream"}, {"refs": [{"id": "ref-for-Exposed\u2462"}], "title": "7. Interface WebTransportReceiveStream"}, {"refs": [{"id": "ref-for-Exposed\u2463"}], "title": "8. Interface WebTransportBidirectionalStream"}, {"refs": [{"id": "ref-for-Exposed\u2464"}], "title": "9. WebTransportError Interface"}], "external": true};
 window.dfnpanelData['797018a7'] = {"dfnID": "797018a7", "url": "https://webidl.spec.whatwg.org/#invalidstateerror", "dfnText": "InvalidStateError", "refSections": [{"refs": [{"id": "ref-for-invalidstateerror"}, {"id": "ref-for-invalidstateerror\u2460"}, {"id": "ref-for-invalidstateerror\u2461"}, {"id": "ref-for-invalidstateerror\u2462"}, {"id": "ref-for-invalidstateerror\u2463"}, {"id": "ref-for-invalidstateerror\u2464"}], "title": "5.4. Methods"}], "external": true};
-window.dfnpanelData['3182eb71'] = {"dfnID": "3182eb71", "url": "https://webidl.spec.whatwg.org/#notsupportederror", "dfnText": "NotSupportedError", "refSections": [{"refs": [{"id": "ref-for-notsupportederror"}], "title": "5.9. Configuration"}], "external": true};
+window.dfnpanelData['3182eb71'] = {"dfnID": "3182eb71", "url": "https://webidl.spec.whatwg.org/#notsupportederror", "dfnText": "NotSupportedError", "refSections": [{"refs": [{"id": "ref-for-notsupportederror"}], "title": "5.2. Constructor"}, {"refs": [{"id": "ref-for-notsupportederror\u2460"}], "title": "5.9. Configuration"}], "external": true};
 window.dfnpanelData['bdbd19d1'] = {"dfnID": "bdbd19d1", "url": "https://webidl.spec.whatwg.org/#idl-promise", "dfnText": "Promise", "refSections": [{"refs": [{"id": "ref-for-idl-promise"}, {"id": "ref-for-idl-promise\u2460"}, {"id": "ref-for-idl-promise\u2461"}, {"id": "ref-for-idl-promise\u2462"}, {"id": "ref-for-idl-promise\u2463"}, {"id": "ref-for-idl-promise\u2464"}], "title": "5. WebTransport Interface"}, {"refs": [{"id": "ref-for-idl-promise\u2465"}], "title": "6. Interface WebTransportSendStream"}, {"refs": [{"id": "ref-for-idl-promise\u2466"}], "title": "7. Interface WebTransportReceiveStream"}], "external": true};
 window.dfnpanelData['ec878a66'] = {"dfnID": "ec878a66", "url": "https://webidl.spec.whatwg.org/#exceptiondef-rangeerror", "dfnText": "RangeError", "refSections": [{"refs": [{"id": "ref-for-exceptiondef-rangeerror"}, {"id": "ref-for-exceptiondef-rangeerror\u2460"}, {"id": "ref-for-exceptiondef-rangeerror\u2461"}, {"id": "ref-for-exceptiondef-rangeerror\u2462"}], "title": "4.2. Attributes"}, {"refs": [{"id": "ref-for-exceptiondef-rangeerror\u2463"}], "title": "4.3. Procedures"}, {"refs": [{"id": "ref-for-exceptiondef-rangeerror\u2464"}], "title": "7.3. Procedures"}], "external": true};
 window.dfnpanelData['b75bb3bd'] = {"dfnID": "b75bb3bd", "url": "https://webidl.spec.whatwg.org/#SecureContext", "dfnText": "SecureContext", "refSections": [{"refs": [{"id": "ref-for-SecureContext"}], "title": "4. WebTransportDatagramDuplexStream Interface"}, {"refs": [{"id": "ref-for-SecureContext\u2460"}], "title": "5. WebTransport Interface"}, {"refs": [{"id": "ref-for-SecureContext\u2461"}], "title": "6. Interface WebTransportSendStream"}, {"refs": [{"id": "ref-for-SecureContext\u2462"}], "title": "7. Interface WebTransportReceiveStream"}, {"refs": [{"id": "ref-for-SecureContext\u2463"}], "title": "8. Interface WebTransportBidirectionalStream"}, {"refs": [{"id": "ref-for-SecureContext\u2464"}], "title": "9. WebTransportError Interface"}], "external": true};
 window.dfnpanelData['be2d2b4c'] = {"dfnID": "be2d2b4c", "url": "https://webidl.spec.whatwg.org/#syntaxerror", "dfnText": "SyntaxError", "refSections": [{"refs": [{"id": "ref-for-syntaxerror"}, {"id": "ref-for-syntaxerror\u2460"}, {"id": "ref-for-syntaxerror\u2461"}], "title": "5.2. Constructor"}], "external": true};
-window.dfnpanelData['82ca3efc'] = {"dfnID": "82ca3efc", "url": "https://webidl.spec.whatwg.org/#exceptiondef-typeerror", "dfnText": "TypeError", "refSections": [{"refs": [{"id": "ref-for-exceptiondef-typeerror"}, {"id": "ref-for-exceptiondef-typeerror\u2460"}], "title": "4.3. Procedures"}, {"refs": [{"id": "ref-for-exceptiondef-typeerror\u2461"}], "title": "5.2. Constructor"}, {"refs": [{"id": "ref-for-exceptiondef-typeerror\u2462"}], "title": "6.4. Procedures"}], "external": true};
+window.dfnpanelData['82ca3efc'] = {"dfnID": "82ca3efc", "url": "https://webidl.spec.whatwg.org/#exceptiondef-typeerror", "dfnText": "TypeError", "refSections": [{"refs": [{"id": "ref-for-exceptiondef-typeerror"}, {"id": "ref-for-exceptiondef-typeerror\u2460"}], "title": "4.3. Procedures"}, {"refs": [{"id": "ref-for-exceptiondef-typeerror\u2461"}], "title": "6.4. Procedures"}], "external": true};
 window.dfnpanelData['b0d7f3c3'] = {"dfnID": "b0d7f3c3", "url": "https://webidl.spec.whatwg.org/#idl-USVString", "dfnText": "USVString", "refSections": [{"refs": [{"id": "ref-for-idl-USVString"}], "title": "5. WebTransport Interface"}, {"refs": [{"id": "ref-for-idl-USVString\u2460"}, {"id": "ref-for-idl-USVString\u2461"}], "title": "5.10. WebTransportCloseInfo Dictionary"}], "external": true};
 window.dfnpanelData['95d7775a'] = {"dfnID": "95d7775a", "url": "https://webidl.spec.whatwg.org/#idl-Uint8Array", "dfnText": "Uint8Array", "refSections": [{"refs": [{"id": "ref-for-idl-Uint8Array"}], "title": "4.3. Procedures"}, {"refs": [{"id": "ref-for-idl-Uint8Array\u2460"}], "title": "6. Interface WebTransportSendStream"}, {"refs": [{"id": "ref-for-idl-Uint8Array\u2461"}], "title": "7. Interface WebTransportReceiveStream"}, {"refs": [{"id": "ref-for-idl-Uint8Array\u2462"}], "title": "7.3. Procedures"}], "external": true};
 window.dfnpanelData['d0b4a948'] = {"dfnID": "d0b4a948", "url": "https://webidl.spec.whatwg.org/#a-promise-rejected-with", "dfnText": "a promise rejected with", "refSections": [{"refs": [{"id": "ref-for-a-promise-rejected-with"}, {"id": "ref-for-a-promise-rejected-with\u2460"}, {"id": "ref-for-a-promise-rejected-with\u2461"}], "title": "4.3. Procedures"}, {"refs": [{"id": "ref-for-a-promise-rejected-with\u2462"}], "title": "6.4. Procedures"}, {"refs": [{"id": "ref-for-a-promise-rejected-with\u2463"}], "title": "7.3. Procedures"}], "external": true};
@@ -4452,7 +4454,7 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['dom-webtransport-createunidirectionalstream'] = {"dfnID": "dom-webtransport-createunidirectionalstream", "url": "#dom-webtransport-createunidirectionalstream", "dfnText": "createUnidirectionalStream()", "refSections": [{"refs": [{"id": "ref-for-dom-webtransport-createunidirectionalstream"}], "title": "5. WebTransport Interface"}, {"refs": [{"id": "ref-for-dom-webtransport-createunidirectionalstream\u2460"}], "title": "5.11. WebTransportSendStreamOptions Dictionary"}, {"refs": [{"id": "ref-for-dom-webtransport-createunidirectionalstream\u2461"}], "title": "12.4. Sending a stream"}], "external": false};
 window.dfnpanelData['webtransport-cleanup'] = {"dfnID": "webtransport-cleanup", "url": "#webtransport-cleanup", "dfnText": "cleanup", "refSections": [{"refs": [{"id": "ref-for-webtransport-cleanup"}, {"id": "ref-for-webtransport-cleanup\u2460"}, {"id": "ref-for-webtransport-cleanup\u2461"}, {"id": "ref-for-webtransport-cleanup\u2462"}], "title": "5.2. Constructor"}, {"refs": [{"id": "ref-for-webtransport-cleanup\u2463"}, {"id": "ref-for-webtransport-cleanup\u2464"}], "title": "5.4. Methods"}, {"refs": [{"id": "ref-for-webtransport-cleanup\u2465"}, {"id": "ref-for-webtransport-cleanup\u2466"}, {"id": "ref-for-webtransport-cleanup\u2467"}], "title": "5.6. Session termination not initiated by the client"}, {"refs": [{"id": "ref-for-webtransport-cleanup\u2468"}], "title": "5.7. Context cleanup steps"}], "external": false};
 window.dfnpanelData['webtransport-queue-a-network-task'] = {"dfnID": "webtransport-queue-a-network-task", "url": "#webtransport-queue-a-network-task", "dfnText": "queue a network task", "refSections": [{"refs": [{"id": "ref-for-webtransport-queue-a-network-task"}, {"id": "ref-for-webtransport-queue-a-network-task\u2460"}, {"id": "ref-for-webtransport-queue-a-network-task\u2461"}], "title": "4.3. Procedures"}, {"refs": [{"id": "ref-for-webtransport-queue-a-network-task\u2462"}, {"id": "ref-for-webtransport-queue-a-network-task\u2463"}, {"id": "ref-for-webtransport-queue-a-network-task\u2464"}, {"id": "ref-for-webtransport-queue-a-network-task\u2465"}, {"id": "ref-for-webtransport-queue-a-network-task\u2466"}, {"id": "ref-for-webtransport-queue-a-network-task\u2467"}, {"id": "ref-for-webtransport-queue-a-network-task\u2468"}], "title": "5.2. Constructor"}, {"refs": [{"id": "ref-for-webtransport-queue-a-network-task\u2460\u24ea"}, {"id": "ref-for-webtransport-queue-a-network-task\u2460\u2460"}, {"id": "ref-for-webtransport-queue-a-network-task\u2460\u2461"}, {"id": "ref-for-webtransport-queue-a-network-task\u2460\u2462"}, {"id": "ref-for-webtransport-queue-a-network-task\u2460\u2463"}], "title": "5.4. Methods"}, {"refs": [{"id": "ref-for-webtransport-queue-a-network-task\u2460\u2464"}, {"id": "ref-for-webtransport-queue-a-network-task\u2460\u2465"}], "title": "5.6. Session termination not initiated by the client"}, {"refs": [{"id": "ref-for-webtransport-queue-a-network-task\u2460\u2466"}], "title": "5.7. Context cleanup steps"}, {"refs": [{"id": "ref-for-webtransport-queue-a-network-task\u2460\u2467"}], "title": "6.2. Methods"}, {"refs": [{"id": "ref-for-webtransport-queue-a-network-task\u2460\u2468"}, {"id": "ref-for-webtransport-queue-a-network-task\u2461\u24ea"}, {"id": "ref-for-webtransport-queue-a-network-task\u2461\u2460"}], "title": "6.4. Procedures"}, {"refs": [{"id": "ref-for-webtransport-queue-a-network-task\u2461\u2461"}], "title": "6.5. STOP_SENDING signal coming from the server"}, {"refs": [{"id": "ref-for-webtransport-queue-a-network-task\u2461\u2462"}], "title": "7.1. Methods"}, {"refs": [{"id": "ref-for-webtransport-queue-a-network-task\u2461\u2463"}, {"id": "ref-for-webtransport-queue-a-network-task\u2461\u2464"}], "title": "7.3. Procedures"}, {"refs": [{"id": "ref-for-webtransport-queue-a-network-task\u2461\u2465"}], "title": "7.4. Reset signal coming from the server"}], "external": false};
-window.dfnpanelData['dictdef-webtransporthash'] = {"dfnID": "dictdef-webtransporthash", "url": "#dictdef-webtransporthash", "dfnText": "WebTransportHash", "refSections": [{"refs": [{"id": "ref-for-dictdef-webtransporthash"}, {"id": "ref-for-dictdef-webtransporthash\u2460"}], "title": "5.9. Configuration"}], "external": false};
+window.dfnpanelData['dictdef-webtransporthash'] = {"dfnID": "dictdef-webtransporthash", "url": "#dictdef-webtransporthash", "dfnText": "WebTransportHash", "refSections": [{"refs": [{"id": "ref-for-dictdef-webtransporthash"}], "title": "5.2. Constructor"}, {"refs": [{"id": "ref-for-dictdef-webtransporthash\u2460"}, {"id": "ref-for-dictdef-webtransporthash\u2461"}], "title": "5.9. Configuration"}], "external": false};
 window.dfnpanelData['dom-webtransporthash-algorithm'] = {"dfnID": "dom-webtransporthash-algorithm", "url": "#dom-webtransporthash-algorithm", "dfnText": "algorithm", "refSections": [{"refs": [{"id": "ref-for-dom-webtransporthash-algorithm"}, {"id": "ref-for-dom-webtransporthash-algorithm\u2460"}], "title": "5.9. Configuration"}], "external": false};
 window.dfnpanelData['dom-webtransporthash-value'] = {"dfnID": "dom-webtransporthash-value", "url": "#dom-webtransporthash-value", "dfnText": "value", "refSections": [{"refs": [{"id": "ref-for-dom-webtransporthash-value"}, {"id": "ref-for-dom-webtransporthash-value\u2460"}], "title": "5.9. Configuration"}], "external": false};
 window.dfnpanelData['enumdef-webtransportcongestioncontrol'] = {"dfnID": "enumdef-webtransportcongestioncontrol", "url": "#enumdef-webtransportcongestioncontrol", "dfnText": "WebTransportCongestionControl", "refSections": [{"refs": [{"id": "ref-for-enumdef-webtransportcongestioncontrol"}], "title": "5. WebTransport Interface"}, {"refs": [{"id": "ref-for-enumdef-webtransportcongestioncontrol\u2460"}], "title": "5.1. Internal slots"}, {"refs": [{"id": "ref-for-enumdef-webtransportcongestioncontrol\u2461"}], "title": "5.2. Constructor"}, {"refs": [{"id": "ref-for-enumdef-webtransportcongestioncontrol\u2462"}], "title": "5.3. Attributes"}, {"refs": [{"id": "ref-for-enumdef-webtransportcongestioncontrol\u2463"}, {"id": "ref-for-enumdef-webtransportcongestioncontrol\u2464"}], "title": "5.9. Configuration"}], "external": false};
@@ -4462,8 +4464,8 @@ <h2 class="no-num no-ref heading settled" id="issues-index"><span class="content
 window.dfnpanelData['dom-webtransportoptions-servercertificatehashes'] = {"dfnID": "dom-webtransportoptions-servercertificatehashes", "url": "#dom-webtransportoptions-servercertificatehashes", "dfnText": "serverCertificateHashes", "refSections": [{"refs": [{"id": "ref-for-dom-webtransportoptions-servercertificatehashes"}], "title": "5.2. Constructor"}, {"refs": [{"id": "ref-for-dom-webtransportoptions-servercertificatehashes\u2460"}, {"id": "ref-for-dom-webtransportoptions-servercertificatehashes\u2461"}], "title": "5.9. Configuration"}], "external": false};
 window.dfnpanelData['dom-webtransportoptions-congestioncontrol'] = {"dfnID": "dom-webtransportoptions-congestioncontrol", "url": "#dom-webtransportoptions-congestioncontrol", "dfnText": "congestionControl", "refSections": [{"refs": [{"id": "ref-for-dom-webtransportoptions-congestioncontrol"}], "title": "5.2. Constructor"}, {"refs": [{"id": "ref-for-dom-webtransportoptions-congestioncontrol\u2460"}], "title": "5.9. Configuration"}], "external": false};
 window.dfnpanelData['compute-a-certificate-hash'] = {"dfnID": "compute-a-certificate-hash", "url": "#compute-a-certificate-hash", "dfnText": "compute a certificate hash", "refSections": [{"refs": [{"id": "ref-for-compute-a-certificate-hash"}], "title": "5.9. Configuration"}], "external": false};
-window.dfnpanelData['verify-a-certificate-hash'] = {"dfnID": "verify-a-certificate-hash", "url": "#verify-a-certificate-hash", "dfnText": "verify a certificate hash", "refSections": [{"refs": [{"id": "ref-for-verify-a-certificate-hash"}], "title": "5.9. Configuration"}], "external": false};
-window.dfnpanelData['custom-certificate-requirements'] = {"dfnID": "custom-certificate-requirements", "url": "#custom-certificate-requirements", "dfnText": "custom certificate requirements", "refSections": [{"refs": [{"id": "ref-for-custom-certificate-requirements"}], "title": "5.9. Configuration"}], "external": false};
+window.dfnpanelData['verify-a-certificate-hash'] = {"dfnID": "verify-a-certificate-hash", "url": "#verify-a-certificate-hash", "dfnText": "verify a certificate hash", "refSections": [{"refs": [{"id": "ref-for-verify-a-certificate-hash"}], "title": "5.2. Constructor"}, {"refs": [{"id": "ref-for-verify-a-certificate-hash\u2460"}], "title": "5.9. Configuration"}], "external": false};
+window.dfnpanelData['custom-certificate-requirements'] = {"dfnID": "custom-certificate-requirements", "url": "#custom-certificate-requirements", "dfnText": "custom certificate requirements", "refSections": [{"refs": [{"id": "ref-for-custom-certificate-requirements"}], "title": "5.2. Constructor"}, {"refs": [{"id": "ref-for-custom-certificate-requirements\u2460"}], "title": "5.9. Configuration"}], "external": false};
 window.dfnpanelData['allowed-public-key-algorithms'] = {"dfnID": "allowed-public-key-algorithms", "url": "#allowed-public-key-algorithms", "dfnText": "allowed public key algorithms", "refSections": [{"refs": [{"id": "ref-for-allowed-public-key-algorithms"}], "title": "5.9. Configuration"}], "external": false};
 window.dfnpanelData['dictdef-webtransportcloseinfo'] = {"dfnID": "dictdef-webtransportcloseinfo", "url": "#dictdef-webtransportcloseinfo", "dfnText": "WebTransportCloseInfo", "refSections": [{"refs": [{"id": "ref-for-dictdef-webtransportcloseinfo"}, {"id": "ref-for-dictdef-webtransportcloseinfo\u2460"}], "title": "5. WebTransport Interface"}, {"refs": [{"id": "ref-for-dictdef-webtransportcloseinfo\u2461"}], "title": "5.3. Attributes"}, {"refs": [{"id": "ref-for-dictdef-webtransportcloseinfo\u2462"}], "title": "5.6. Session termination not initiated by the client"}, {"refs": [{"id": "ref-for-dictdef-webtransportcloseinfo\u2463"}], "title": "5.10. WebTransportCloseInfo Dictionary"}], "external": false};
 window.dfnpanelData['dom-webtransportcloseinfo-closecode'] = {"dfnID": "dom-webtransportcloseinfo-closecode", "url": "#dom-webtransportcloseinfo-closecode", "dfnText": "closeCode", "refSections": [{"refs": [{"id": "ref-for-dom-webtransportcloseinfo-closecode"}], "title": "5.4. Methods"}, {"refs": [{"id": "ref-for-dom-webtransportcloseinfo-closecode\u2460"}], "title": "5.6. Session termination not initiated by the client"}, {"refs": [{"id": "ref-for-dom-webtransportcloseinfo-closecode\u2461"}], "title": "5.10. WebTransportCloseInfo Dictionary"}], "external": false};