4 ms·
I don't see how a protocol would help. This is very application specific. One could exploit algorithmic complexity attacks, like a bad regexp, but that's usual
by misframer 12y ago
I don't see how a protocol would help. This is very application specific.
One could exploit algorithmic complexity attacks, like a bad regexp, but that's usually specific to your own code.
- rdl 12y agoIt's not "stuff you can fix in the protocol itself" so much as "things a really smart proxy can do" -- with different levels, basically "a stateless proxy with no real specific information about your client or server other than what is well-known", "a slightly-stateful proxy which can learn", "a fully stateful proxy", "a logging proxy which just has to identify threats retrospectively and alarm, rather than block".