HTTP/1.1 Must Die

3 months ago 1

image

Days

Hours

Minutes

Seconds

HTTP/1.1 is inherently insecure and consistently exposes millions of websites to hostile takeover.
On August 6, James Kettle from PortSwigger Research will reveal new classes of desync attack, that enabled him to compromise multiple CDNs and kick off the desync endgame.

Follow PortSwigger for the full reveal.

Attending Black Hat USA or DEF CON? Watch the talk live.

Read Entire Article