News for hackers. Stuff that matters.
Re:Cloudflare and RSS by problems on Wednesday October 05, 2016 @03:08PM (#12646789)
They'd have to probe every endpoint to figure out the content-type of the return.

And if your web application allows queries that produce RSS feeds that could still result in a really bad L7 attack if you simply were to ignore all feeds. No caching + randomized queries on a small site would knock it offline in no time.

Re:Cloudflare and RSS by tracker1 on Wednesday October 05, 2016 @04:40PM (#12647639)
I would think that a good caching solution on the server for RSS requests could perform decently even under DDoS scenarios... though, this is why people used other services in front of their RSS feeds, so that they were better cached. Most blogs aren't generation more than a couple new articles a day, so caching 15-120 minutes wouldn't be an issue for most use cases.