3 ms·
So basically HTTP/2 authors missed the existence of TCP SYN-flood attacks(Not the same, but more or less the same mechanism)? Was this bought up during standar
by whizzter 3y ago
So basically HTTP/2 authors missed the existence of TCP SYN-flood attacks(Not the same, but more or less the same mechanism)? Was this bought up during standardization meetings or was it just hubris?
https://en.wikipedia.org/wiki/SYN_flood https://en.wikipedia.org/wiki/SYN_flood
- ta1243 3y agoAs did attackers, how many years has http/2 been around?
- josefx 3y agoWhen HTTP/2 came out attackers where busy exploiting every point in the security advisory section of the RFC. Over night a large amount of web services where suddenly vulnerable to de-sync attacks.
- majke 3y agoNope, this looks like it's about opening streams (with related work) and closing them in rapid succession, over an established connection.