4 ms·
This should also help put an end to cross domain search timing attacks. An old example of one using the IMG tag: https://www.idontplaydarts.com/2015/09/cross-d
by h000per 8y ago
This should also help put an end to cross domain search timing attacks. An old example of one using the IMG tag:
https://www.idontplaydarts.com/2015/09/cross-domain-timing-attacks-against-lucene/ https://www.idontplaydarts.com/2015/09/cross-domain-timing-a...
- tedunangst 8y agoBut chrome doesn't see the content type until after the response is served.
- untog 8y agoNo, it sees the content type in the headers that are at the start of the response. Presumably if that header isn't correct it'll stop downloading any further data.
- tedunangst 8y agoAfter Lucene has spent some variable amount of time depending on how many documents match the query...