Tag

http-security

Safeguard articles tagged "http-security" — guides, analysis, and best practices for software supply chain and application security.

1 article

Application Security

The security cost of long-lived HTTP connections

Keep-alive and HTTP/2 multiplexing cut handshake overhead but hold server resources open per connection — Slowloris and 2023's Rapid Reset attacks both exploited exactly that tradeoff.

Jul 8, 20266 min read