Paris Web - HTTP/3, ce n'est pas seulement HTTP/2 avec un numéro plus grand

https://www.paris-web.fr/2021/conferences/http3-ce-nest-pas-seulement-http2-avec-un-numero-plus-grand.php

#HTTP3 #QUIC #HTTP2 #HTTP #Web #Internet #Protocoles #Normalisation

HTTP/3, ce n'est pas seulement HTTP/2 avec un numéro plus grand

La dernière version du protocole du Web, HTTP, la version 3, abandonne le protocole de transport TCP pour passer à QUIC. Pourquoi, comment ?

HTTP/2: The Sequel is Always Worse | PortSwigger Research

HTTP/2 is easily mistaken for a transport-layer protocol that can be swapped in with zero security implications for the website behind it. In this paper, I'll introduce multiple new classes of HTTP/2-exclusive threats caused by both implementation flaws and RFC imperfections.

#http2 #http #security #rfc

https://portswigger.net/research/http2

HTTP/2: The Sequel is Always Worse

In this research paper James Kettle introduces multiple new classes of HTTP/2-exclusive attacks, demonstrated on popular websites and servers.