Resource exhaustion attacks have gotten much, much worse over the past decade. The "modern" way to do things is to have a connection/session for everything you

Resource exhaustion attacks have gotten much, much worse over the past decade. The "modern" way to do things is to have a connection/session for everything you do. This means state allocation for everything you do, which means resource exhaustion attacks everywhere. It has turned the internet into a fragile mess that can't survive without a godlike cloudflare to sweep all the resource exhaustion attacks under the rug. Hey I know, let's make DNS use TCP! What could go wrong. Bittorrent survives and even thrives in the face of constant active MPAA-funded attacks, because its DHT doesn't use sessions. IPFS collapses under its own weight because it does. Wireguard is the only silver lining in all of this. I think it's the only major sessionless protocol introduced in the last decade. The cookie scheme it uses to avoid sessions is genius (and Rosenpass has an improved version that avoids creating a circular dependency with NTP).