Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://chaos.social/users/icing/statuses/111220906154299645">Stefan Eissing (icing@chaos.social)'s status on Thursday, 12-Oct-2023 16:43:46 JST</a><a href="https://chaos.social/@icing" title="icing@chaos.social"><img src="https://gnusocial.jp/avatar/78887-48-20221222072158.webp" width="48" height="48" alt="Stefan Eissing" style="position: absolute; left: 0; top: 0;">Stefan Eissing</a></section><article><p>Follow-up on the HTTP/2 Rapid Reset Exploit: NGINX also describes the mechanism they have in place to prevent this.</p><p>Google and Cloudflare should have written "the typical web server is not affected, but the typical Cloud implemenetation is."</p><p>Blaming the exploit on the protocol standard is lame. </p><p>When you implement 100% of an RFC you are not done with your work.</p><p><a href="https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0033.html" rel="nofollow noreferrer">https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0033.html</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/2175200#notice-4271683">In conversation</a><time datetime="2023-10-12T16:43:46+09:00" title="Thursday, 12-Oct-2023 16:43:46 JST">about a year ago</time> <span>from <span><a href="https://chaos.social/@icing/111220906154299645" rel="external" title="Sent from chaos.social via ActivityPub">chaos.social</a></span></span><a href="https://chaos.social/@icing/111220906154299645">permalink</a></footer></blockquote>

Corresponding Notice

Embed this notice
Stefan Eissing (icing@chaos.social)'s status on Thursday, 12-Oct-2023 16:43:46 JST Stefan Eissing
Follow-up on the HTTP/2 Rapid Reset Exploit: NGINX also describes the mechanism they have in place to prevent this.
Google and Cloudflare should have written "the typical web server is not affected, but the typical Cloud implemenetation is."
Blaming the exploit on the protocol standard is lame.
When you implement 100% of an RFC you are not done with your work.
https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0033.html
In conversationabout a year ago from chaos.socialpermalink