Could we make him pay a few bucks? Specifically, can we make him traffic multiply? I wonder what exactly is he doing with request headers... maybe this could w

Could we make him pay a few bucks? Specifically, can we make him traffic multiply? I wonder what exactly is he doing with request headers... maybe this could work: 1) set up page /fluffy with wildly compressing contents, say 50MB of $£€$£€$£€$£€$£€.. always force gzip encoding 2) set up a few bots (amazon?) to download that page from his site, but do not accept any compression Start the attack on some time the guy is probably sleeping, it might go on for a few hours before he notices, costing him a couple of hundred bucks in bandwidth. Or maybe just some cpu waste in same vein: the guy has to open the gzip before forwarding to do string replace and re-zip it afterwards, so you can make sure that the content REALLY balloons..