> Rate Limiting... OOM... There is no REST equivalent to this attack of this severity. Yes there is, simply throw JSON such as `[[[[[[...` at the server. You p

> Rate Limiting... OOM... There is no REST equivalent to this attack of this severity. Yes there is, simply throw JSON such as `[[[[[[...` at the server. You probably don't have to get into parsing though, nearly all C# (and Node, and Ruby, some Rust even) assumes that memory is, in-fact, infinitely large and just throw network input into a precisely-sized buffer. Just upload a few GB of nonsense to an API endpoint, bonus points if you omit Content-Length.