4 ms·
What happens if you send more? Does it just get ignored by the server?
by blauditore 3y ago
What happens if you send more? Does it just get ignored by the server?
- jsnell 3y agoFor most current HTTP/2 implementations it'll just be ignored, and that is a problem. We've seen versions of the attack doing just that, as covered in the variants section of the article. Servers should switch to closing the connection if clients exceed the stream limit too often, not just ignoring the bogus streams.