---
id: 243
title: "HTTP/1.1 Must Die: What This Means for Bug Bounty Hunters"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/http-1-1-must-die-what-this-means-for-bug-bounty-hunters"
published_at: "2025-08-06T22:23:28Z"
tags: ["bug-bounty", "burp-suite", "http-desync", "request-smuggling", "http1-must-die", "cdn"]
phying_url: "https://phying.com/item/243"
lang: en
---

# HTTP/1.1 Must Die: What This Means for Bug Bounty Hunters

## Summary

For bug bounty hunters, HTTP/1.1 Must Die is a major opportunity: desync flaws bypass traditional fixes and netted the research team over $200k in bounties in just two weeks.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2025-08-06T22:23:28Z
- **Original:** https://portswigger.net/blog/http-1-1-must-die-what-this-means-for-bug-bounty-hunters
- **Phying News:** https://phying.com/item/243