Comment on Codex Discovered a Hidden HTTP/2 BombComments−DiabloD33moAfter reading the article, I can conclude that Codex discovered nothing new.This is already something that is known, and if you're able to be targeted by this (which is not the majority of users) configure your httpd differently.−swedishuser3moApache and nginx maintainers implemented fixes one or two days after the author reported, so how do you mean this was known already?−DiabloD33moAFIAK, it was already being actively exploited in DDoS attacks.
Comments
After reading the article, I can conclude that Codex discovered nothing new.
This is already something that is known, and if you're able to be targeted by this (which is not the majority of users) configure your httpd differently.
Apache and nginx maintainers implemented fixes one or two days after the author reported, so how do you mean this was known already?
AFIAK, it was already being actively exploited in DDoS attacks.