Cybersecurity Alert: Detailed Analysis of the HTTP/2 Vulnerability ‘Made You Reset’

Cybersecurity Alert: Detailed Analysis of the HTTP/2 Vulnerability 'Made You Reset'

Recently, a new type of cyber vulnerability known as “Made You Reset” has garnered widespread attention in the security field. This vulnerability is related to the HTTP/2 protocol, which is widely used on the modern internet, and can be exploited by attackers to launch large-scale Denial of Service (DoS) attacks, potentially exhausting server resources and … Read more

Critical Vulnerability in HTTP/1.1 Poses Malicious Takeover Risk for Millions of Websites

Critical Vulnerability in HTTP/1.1 Poses Malicious Takeover Risk for Millions of Websites

A critical vulnerability exists in the HTTP/1.1 protocol that could expose tens of millions of websites to malicious takeover risks through complex desynchronization attacks. This foundational protocol flaw, present for decades, creates extremely blurred request boundaries, allowing attackers to manipulate network traffic and compromise entire infrastructures.Part01 Analysis of the Critical Vulnerability in HTTP/1.1 A report … Read more

Solutions for HTTP/2 Issues with Cursor in China

Solutions for HTTP/2 Issues with Cursor in China

Recently, many users in China have reported that they are unable to use Cursor, especially with the Claude series models, which have all been disabled. This issue is likely known to everyone. The reason is that model providers like OpenAI, Google, and Anthropic have explicitly stated that they do not provide services to mainland China, … Read more

HTTP/3 vs HTTP/2: A Performance Revolution! An In-Depth Analysis Before Upgrading

HTTP/3 vs HTTP/2: A Performance Revolution! An In-Depth Analysis Before Upgrading

In today’s internet era, website performance is the lifeblood of user experience and SEO rankings! The HTTP protocol, as the core of web communication, has made a remarkable leap from HTTP/1.1 to HTTP/2, but does the emergence of HTTP/3 truly bring about a revolutionary improvement? This article will delve into the performance differences between HTTP/3 … Read more

gRPC: A High-Performance RPC Framework Based on HTTP/2 for Millisecond-Level Communication Supporting Multiple Languages Including Python

gRPC: A High-Performance RPC Framework Based on HTTP/2 for Millisecond-Level Communication Supporting Multiple Languages Including Python

What is gRPC? gRPC is a modern high-performance RPC framework open-sourced by Google, utilizing HTTP/2 protocol and Protocol Buffers serialization technology, supporting cross-language service calls. It magically enables services written in different languages to communicate directly—whether it’s a C++ microservice calling a Python algorithm or a Java application accessing a Go module, achieving millisecond-level communication! … Read more

Volo-HTTP 0.4.0 Released: Official Support for HTTP/2 and Significant Improvements in Client Usability!

Volo-HTTP 0.4.0 Released: Official Support for HTTP/2 and Significant Improvements in Client Usability!

🤖 Introduction to Volo Volo is a high-performance, easy-to-use Rust RPC framework open-sourced by the ByteDance service framework team. The Volo framework has very low overhead and provides command-line tools and a flexible middleware design, allowing developers to easily get started and enjoy the development experience that Rust offers. Project GitHub link:https://github.com/cloudwego/volo This article introduces … Read more

HTTP/2 Origin Trap: Cache Invalidated, Website Crashes Instantly?!

HTTP/2 Origin Trap: Cache Invalidated, Website Crashes Instantly?!

EdgeOne has a high threshold for use, and here we go again with an error: ERR_EMPTY_RESPONSE I asked the large model, but it couldn’t clarify the reason. Submitted a ticket, and then this issue was resolved. The ERR_EMPTY_RESPONSE error usually indicates that the client (such as a browser or network request tool) did not receive … Read more

Decoding the New Features of HTTP/2 and HTTP/3

Decoding the New Features of HTTP/2 and HTTP/3

Author | Frontend Craftsman Editor | Zhang Zhidong, Wang Wenjing HTTP/2 has significantly improved web performance compared to HTTP/1.1, requiring only an upgrade to this protocol to reduce many of the performance optimizations that were previously necessary. Of course, compatibility issues and how to gracefully downgrade are likely among the reasons it is not yet … Read more

nghttp2: Implementing HTTP/2 on ESP32 Series SOC Platforms

nghttp2: Implementing HTTP/2 on ESP32 Series SOC Platforms

In application development, HTTP/2 is a highly efficient network protocol that has garnered attention due to its features such as multiplexing and header compression. nghttp2 is an open-source project that provides rich functionality for implementing HTTP/2. As embedded platforms like the ESP32 evolve, applying the features of nghttp2 on these platforms has become a significant … Read more

Can HTTP/2 + SSE Completely Replace WebSocket?

Can HTTP/2 + SSE Completely Replace WebSocket?

Hello everyone, it’s great to see you again, I am “Frontend Technology Advancement“, and I will guide everyone to pay attention to the cutting-edge of frontend technology and delve into the underlying technologies, let’s progress together. Also, feel free to follow, like, bookmark, and share! 1. What is SSE (Server-Sent Events) Server-Sent Events (SSE) is … Read more