5 ms·

Is HTTP/2 just too complex for a mere mortal to implement?

• gustavus 3y ago
  Sounds like the OAuth2 spec.
  • unilynx 3y ago
    Well have you seen oauth1? So much trouble to be able to support non-secure HTTP.
    • RedShift1 3y ago
      I'm on a project where OAuth 2.0 will be implemented. Please send help.
• nijave 3y ago
  I don't think this has too much to do with the spec and more about discovering and preventing DoS vectors.
  • pornel 3y ago
    Also HAProxy managed to predict and mitigate this issue 5 years ago.
• deleted 3y ago
  [deleted]
• supriyo-biswas 3y ago
  No, but QUIC definitely falls in the overly complicated category, spanning multiple, large RFCs. This attack is just about failing to enforce the negotiated parameters during the start phase of the connection.
  • mnot 3y ago
    Wait till you see the TCP RFCs…
    • supriyo-biswas 3y ago
      I guess it helps that TCP is usually covered to some extent in an undergrad course, and also that it's unencrypted.