News for hackers. Stuff that matters.

A comment on HTTP/2-exclusive threats caused by implementation flaws and RFC imperfections. Parent comment

Re:HTTP/2-exclusive threats caused by implementation flaws a... by ikiris on Friday August 06, 2021 @02:22AM (#28083903)
this kind of terrible implementation is a lot of why encrypted quic exists.
[ Parent | on HN ]
Re:HTTP/2-exclusive threats caused by implementation flaws a... by georgyo on Friday August 06, 2021 @02:52AM (#28084057)
Though I think these same problems would happen over http3/quic.

Http3 is almost exactly http2 but over quic. This means the requests should be possible to force the same desyncs talked about in the article.

[ Parent | on HN ]