HTTP/2 Zero-Day Vulnerability Results in Record-Breaking DDoS Attacks

• Caddy

  402 53,718 9.5 Go

  Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

  

Go is patching it soon: https://github.com/caddyserver/caddy/issues/5877#issuecommen...

(Caddy just uses Go's HTTP/2 implementation.)

• http2-prioritization-issues

  4 262 0.0

  Tracks issues / notes for HTTP/2 prioritization across browsers, CDNs and servers

I'm not an area expert, but common issues raised over the years:

- HTTP/2 as implemented by browsers requires HTTPS, and some people don't like HTTPS.

- HTTP/2 was "designed by a committee" and has: a lot of features and complexity; most of those features were never implemented by most of the servers/clients; most of those advanced features that were implemented were very naive or buggy [0]; some were implemented and then turned out to be more harmful than useful, and got dropped (HTTP/2 push in browsers [1]) etc.

[0] https://github.com/andydavies/http2-prioritization-issues

[1] https://developer.chrome.com/blog/removing-push

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project