← Back to feed
research PortSwigger Research

HTTP/1.1 must die: the desync endgame

PortSwigger Research

Abstract Upstream HTTP/1.1 is inherently insecure and regularly exposes millions of websites to hostile takeover.

Read the full story PortSwigger Research →

Related Coverage

research HTTP/3 in Burp Suite - it’s time to find a bigger wordlist PortSwigger Research · Sep 23 research The Lure Isn't The Malware. It's Your Logo. Recorded Future · Sep 23 research Looking for free Robux? Here’s what’s real, and what’s a scam ESET Research · Sep 22