Hacking HTTP/2 - New Attacks on the Internet's Next Generation Foundation

Hacking HTTP/2 - New Attacks on the Internet's Next Generation Foundation

Explore the emerging HTTP/2 protocol and its vulnerabilities in this Black Hat conference talk. Delve into the rapid adoption of HTTP/2 by major internet players and its role as a transition layer for web traffic. Discover new attack vectors targeting HTTP/2's components, including the flow control mechanism and header compression. Learn about the low data rate attack and industry multiplexing attack through video demonstrations. Examine potential solutions, from abandoning HTTP/2 to implementing patches and virtual patching. Gain key insights and technical details to better understand the security implications of this next-generation internet foundation.