News for hackers. Stuff that matters.

A comment on Critical RCE Vulnerability in Apache HTTP Server.

Re:Critical RCE Vulnerability in Apache HTTP Server by tancop on Thursday November 12, 2026 @12:39AM (#50463477)
HTTP2 is insecure and 1.1 is slow. At this point just find a good H3 implementation and drop the old protocols.
[ Parent | on HN ]
Re:Critical RCE Vulnerability in Apache HTTP Server by nine_k on Thursday November 12, 2026 @01:50AM (#50463874)
Not everything benefits from pipelineling and multiplexing. I wish there existed a protocol that's even simpler than HTTP 1.1, which would be good for exposing APIs. Something like Thrift, but maybe even simpler and more bulletproof.
[ Parent | on HN ]
Re:Critical RCE Vulnerability in Apache HTTP Server by account42 on Thursday November 12, 2026 @05:52AM (#50465485)
Well there's HTTP/0.9. Can't get much simpler than that.
[ Parent | on HN ]