3 ms·
What's the right way to solve for this generally? A CORS policy wouldn't be effective since it's not a browser requesting the image.
by Zaheer 6y ago
What's the right way to solve for this generally? A CORS policy wouldn't be effective since it's not a browser requesting the image.
- Ayesh 6y agoIt's likely that the consumer doesn't even display that image. It's probably a dry 1mb download test. Most indian ISPs, even mobile ones are extremely cheap to not matter a 1mb.
- speedgoose 6y agoIf the image is not displayed and the stack can handle a lot of tcp connections, perhaps a reverse http slowloris attack : you send the image response headers as slow as you can to keep the tcp connection open but to make the receiver waste its time. If it's a speed test, they will eventually use another image.