In the previous article, we discussed how HTTP/2 brings lower bandwidth requirements, less network overhead, and reduced server memory usage. Now, let’s test whether the websites you operate and those of your competitors have implemented HTTP/2. Here are 4 methods to test if a website is using HTTP/2 1 Geekflare Online Testing Tool Method: Open … Read more
“ Reading this article will take about 3 minutes. ” Recently, I wanted to upgrade my website’s protocol to HTTP/2, as it was previously HTTP/1.1. Since my website loads many resources in parallel, HTTP/2 improves upon HTTP/1.1 by allowing all connections to share a single TCP connection, and there is no limit on the number … Read more
The Cloud Native Computing Foundation (CNCF) is a non-profit open-source organization focused on promoting the development and standardization of cloud-native computing. gRPC (Google Remote Procedure Call) is a high-performance, cross-language RPC framework initiated and open-sourced by Google. In 2017, Google donated the gRPC project to CNCF, making it one of the core components of the … Read more
Overview of Attack Principles This complex HTTP request smuggling attack exploits the differences in parsing behavior between front-end proxy servers and back-end application servers. The new technique uses malformed chunked transfer encoding to bypass existing security controls and inject unauthorized secondary requests into web applications. Key Points Exploiting malformed HTTP chunked encoding to create parsing … Read more
Author: Sreeni Tellakula Translator: Wang Kunxiang Editor: Wan Jia During last year’s Cloudflare birthday week, we announced the initial support for the next-generation protocol HTTP/3, which is based on HTTP/2. Our goal is to work towards building a better internet. Collaboration in standard-setting is crucial, and we are honored to be involved in the standardization … Read more
HTTPX is a “next-generation” HTTP client for Python 3. Its goal is to retain the user-friendly and understandable API of requests while adding modern features such as asynchronous support and HTTP/2. In other words, if you like the syntax of requests but want async/await, HTTP/2, or stricter timeout controls, HTTPX is the familiar yet fresh … Read more
Introduction This article continues the “Wireshark Practical Case Study” series, delving into an “epoch-making” “efficiency revolution” in the world of web performance. It concerns the “loading speed” of every modern website you open, the fundamental transformation in the “dialogue” between “browsers” and “servers”, and a great “traffic” revolution initiated to end the “old” and “inefficient” … Read more
Multiple vulnerabilities have been discovered in HTTP/2 that are susceptible to a new attack technique called MadeYouReset, which can be exploited to launch powerful denial-of-service (DoS) attacks. Researchers Gal Bar Nahum, Anat Bremler-Barr, and Yaniv Harel stated: “MadeYouReset bypasses the limits typically imposed by servers, which allow a maximum of 100 concurrent HTTP/2 requests per … Read more
Shake Network Technology NewsClick the right to follow for the latest technology news!Part01 Vulnerability Overview Security researchers have discovered a new denial-of-service (DoS) vulnerability in the implementation of the HTTP/2 protocol, named “MadeYouReset” (CVE-2025-8671). This vulnerability was publicly disclosed on August 13, 2025, marking a significant escalation in threats related to network protocols. Attackers can … Read more
In the dead of night, you might be sleeping soundly, unaware that countless servers around the world are experiencing a storm of “forced reboots”. This is not an exaggeration. Frontline security teams are closely monitoring a new type of cyber attack called “MadeYouReset”. It acts like a top assassin, exploiting a fatal flaw in the … Read more