News for hackers. Stuff that matters.
Re:Critical RCE Vulnerability in Apache HTTP Server by mogoh on Thursday November 12, 2026 @05:31AM (#50465368)
I don't think it was fast tracked. Was it? I heard the rational to do HTTP 2 and soon later HTTP 3 was to split improvements and ease transition.
Re:Critical RCE Vulnerability in Apache HTTP Server by mono442 on Thursday November 12, 2026 @05:34AM (#50465378)
HTTP/3 was the real mistake. It basically reimplements TCP on top of UDP and from my testing (at least the existing implementations) it generally performs worser then HTTP/2. Even when testing on somewhat a bit lossy connection.