HTTP/1.1 Must Die: What This Means for In-House Pentesters

Published

2025-08-06 22:23

Collected

2026-07-01 11:00

---
id: 242
title: "HTTP/1.1 Must Die: What This Means for In-House Pentesters"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/http-1-1-must-die-what-this-means-for-in-house-pentesters"
published_at: "2025-08-06T22:23:41Z"
tags: ["burp-suite", "http-desync", "request-smuggling", "pentest", "http1-must-die", "cdn"]
phying_url: "https://phying.com/item/242"
lang: en
---

# HTTP/1.1 Must Die: What This Means for In-House Pentesters

## Summary

Why in-house pentesters should revisit request smuggling: mitigations have made desync flaws harder to spot, and Burp Suite tools can help detect and eliminate upstream HTTP/1.1.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2025-08-06T22:23:41Z
- **Original:** https://portswigger.net/blog/http-1-1-must-die-what-this-means-for-in-house-pentesters
- **Phying News:** https://phying.com/item/242