Skip to content
HTTP/1.1 must die: Dafydd Stuttard on what this means for enterprise security
portswigger.net | blog | #http-desync | #request-smuggling | #portswigger | #james-kettle | #http1-must-die | #enterprise-security
Summary
Dafydd Stuttard explains the enterprise implications of James Kettle's HTTP desync research: any upstream HTTP/1.1 hop, including CDN downgrades, leaves organizations exposed to request smuggling.
- Published
- Collected