← Back to feed
Vendors & MarketEmerging1 sourceAug 6, 2025 · 22:20via PortSwigger Research

HTTP/1.1 must die: the desync endgame

Brief

Abstract Upstream HTTP/1. 1 is inherently insecure and regularly exposes millions of websites to hostile takeover. Six years of attempted mitigations have hidden the issue, but failed to fix it. This p

Read more on PortSwigger Research