CYBERSECURITY
FEATURED ANALYSIS
HTTP/1.1 must die: the desync endgame
SOURCE
PortSwigger Research
DATE
READ
1 min read
Abstract Upstream HTTP/1.1 is inherently insecure and regularly exposes millions of websites to hostile takeover. Six years of attempted mitigations have hidden the issue, but failed to fix it. This p
Abstract Upstream HTTP/1.1 is inherently insecure and regularly exposes millions of websites to hostile takeover. Six years of attempted mitigations have hidden the issue, but failed to fix it. This p