> ReDoS really isn't the same as "traditional DoS", because the latter has a vastly larger footprint You're confusing DoS (denial of service, a very broad clas

> ReDoS really isn't the same as "traditional DoS", because the latter has a vastly larger footprint You're confusing DoS (denial of service, a very broad class of problems that includes ReDoS) with DDoS, which is a distributed denial of service attack, something that disables a service using multiple malicious sources of input. The terms are used interchangeably (often erroneously) a lot, but the single-D DoS needn't have a "big footprint". It could be making their server crash with a single byte somewhere, like a particular old Linksys router exploit some may remember.