4 ms·
My understanding is limited, but HTTP/3 boils down roughly to HTTP/2+QUIC. Major cloud providers are still shaking issues out of HTTP/2 like "Rapid Reset" 2 mo
by password4321 3y ago
My understanding is limited, but HTTP/3 boils down roughly to HTTP/2+QUIC.
Major cloud providers are still shaking issues out of HTTP/2 like "Rapid Reset" 2 months ago, the nesting and layers open gaps and new edge cases as naive implementations were clearly not yet battle hardened even against old attack families like amplification/resource exhaustion.
https://news.ycombinator.com/item?id=37830987 https://news.ycombinator.com/item?id=37830987 The novel HTTP/2 'Rapid Reset' DDoS attack
https://news.ycombinator.com/item?id=37837043 https://news.ycombinator.com/item?id=37837043 HAProxy is not affected by the HTTP/2 Rapid Reset Attack