4 ms·
To be very clear/direct, the HTTP pipelining you're referring to never fully worked and was always hit with problems with middleboxes, problems with servers, si
by ghusbands 3y ago
To be very clear/direct, the HTTP pipelining you're referring to never fully worked and was always hit with problems with middleboxes, problems with servers, significant security vulnerabilities around request smuggling and more besides.
Every project I've been involved with that tried to use them eventually turned them off. So the quote is true in practise.
- GoblinSlayer 3y agoAIU request smuggling, it can't be prevented by disabling pipelining, only by validation.