HTTP/2 Denial of Service Advisory

Re:HTTP/2 Denial of Service Advisory by the_duke on Tuesday August 13, 2019 @02:22PM (#20688755)

We can happily look forward to HTTP/3 then.

It actually IS a full stack...

[ Parent | on HN ]

Re:HTTP/2 Denial of Service Advisory by mey on Tuesday August 13, 2019 @03:58PM (#20689609)

I'm curious about how practical UDP amplification/reflection attacks will be in the wild with QUIC. A cloudflare blog mentions it in passing ( https://blog.cloudflare.com/head-start-with-quic/ ). I haven't dug into the protocol, but since what replaces the TCP SYN/ACK is now also setting up encryption, a lot more data is flying back and forth.

[ Parent | on HN ]

Re:HTTP/2 Denial of Service Advisory by persistent on Tuesday August 13, 2019 @03:48PM (#20689544)

Putting HTTP/3 on a userspace QUIC stack solves a number of these problems.

[ Parent | on HN ]

Re:HTTP/2 Denial of Service Advisory by throwaway2048 on Tuesday August 13, 2019 @04:21PM (#20689821)

HTTP/2 already is userspace.

[ Parent | on HN ]