#http2
LightNews LightNews
la-temps.bsky.social
へえ〜HTTP2も3同様に骨格作ったのやっぱGoogleだったんだ　さすがぁ…　めっちゃおもろい
November 7, 2026 at 3:21 PM
startdebugging.bsky.social
Kestrel on .NET 10 won't do h2c with Http1AndHttp2: it silently serves HTTP/1.1. You need an Http2-only port and prior knowledge.
https://startdebugging.net/2026/11/how-to-accept-http2-cleartext-h2c-in-kestrel-behind-nginx-on-dotnet-10/?utm_source=bluesky&utm_medium=social&utm_campaign=auto
November 10, 2026 at 7:09 AM
la-temps.bsky.social
ネスペだけど、『HTTP1,2,3の違い何？』答えられずマスタリングTCPIP読み返したら、1ページしか割かれていなかった。
HTTP3はQUIC通信（UDP活用)なのでは？の推測は合ってた。Web屋さんでないので、HTTP2は1と違いがあんまりはっきりとわからぬ…
November 7, 2026 at 2:14 PM
javapedianet.bsky.social
What role does HTTP/2 play in gRPC?

https://www.javapedia.net/spring-grpc-interview-questions/11701/what-role-does-http2-play-in-grpc

#javapedia #interviewquestions #programming #shorts #spring #grpc
November 4, 2026 at 6:06 AM
hugovalters.bsky.social
Go's autocert gives net/http automatic Let's Encrypt certs and renewal via tls.Config.GetCertificate — no cron, no certbot. Just add HTTP/2 and serve. #go #tls #ValtersIT https://www.valtersit.com/vault/serve-http2-with-automatic-tls-via-lets-encrypt-and-autocert-dc7713/
Serve HTTP/2 with Automatic TLS via Let's Encrypt and autocert in net/http
www.valtersit.com
November 5, 2026 at 4:30 AM
osmose.bsky.social
I was worried about the extra atlas data but 1. HTTP2 makes extra requests cheap, and 2. the atlases gzip down to like 1-2kb each.
October 31, 2026 at 5:45 AM
infosec.skyfleet.blue
Multiple vulnerabilities in Suricata before 8.0.8
oss-sec: Multiple vulnerabilities in Suricata before 8.0.8
Posted by Victor Julien on Oct 29 Suricata 8.0.8 was released addressing a number of vulnerabilities. - HIGH: tftp: unbounded transaction retention can cause CPU exhaustion (Issue #9085) - HIGH: sip: quadratic complexity in TCP header processing (Issue #9101) - HIGH: http2: brotli decoders across many streams can exhaust memory (Issue #9104) - HIGH: doh2: xbits track-tx type confusion can crash Suricata (Issue #9133) - HIGH: http2: header inspection buffer can...
seclists.org
October 30, 2026 at 1:14 AM
postrss.bsky.social
HTTP/2 and HTTP/3: Do They Matter for SEO and Speed?
#SiteSEOAIAudit #AISearch #GEO #KeywordResearch

https://siteseoaiaudit.com/http2-http3-seo/
HTTP/2 and HTTP/3: Do They Matter for SEO and Speed? #SiteSEOAIAudit #AISearch #GEO #KeywordResearch
siteseoaiaudit.com
October 29, 2026 at 6:02 AM
infosec.skyfleet.blue
Multiple vulnerabilities in Suricata before 8.0.8
oss-sec: Multiple vulnerabilities in Suricata before 8.0.8
Posted by Victor Julien on Oct 29 Suricata 8.0.8 was released addressing a number of vulnerabilities. - HIGH: tftp: unbounded transaction retention can cause CPU exhaustion (Issue #9085) - HIGH: sip: quadratic complexity in TCP header processing (Issue #9101) - HIGH: http2: brotli decoders across many streams can exhaust memory (Issue #9104) - HIGH: doh2: xbits track-tx type confusion can crash Suricata (Issue #9133) - HIGH: http2: header inspection buffer can...
seclists.org
October 30, 2026 at 1:14 AM
torn-apart-by-dogs.autistic.ninja
i wrote a port listener that looked for quic and http2 handshakes on 7844 and used iptables to route the argo tunnel endpoint to my listener on a public ip. the cloudflared client attempts the 7844 connect on tcp and udp for http2 and quic respectively. the other cloudflared svcs connect fine
October 29, 2026 at 4:08 AM
getpacketai.bsky.social
New Istio AuthorizationPolicy bypass lets attackers slip past method-based rules with lowercased HTTP/2 requests. Patch ISTIO-SECURITY-2026-007 now—also fixes a…

https://dev.to/amareswer/istio-authorizationpolicy-bypass-http2-method-case-bug-3ii8

#cybersecurity #infosec
October 29, 2026 at 2:30 PM
euvd-bot.bsky.social
🚨 EUVD-2026-105978
📊 3.7/10
🏢 Oracle Corporation

📝 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2). Supported versions that are affected ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-105978

#cybersecurity #infosec #cve #euvd
October 29, 2026 at 2:01 AM
rdn.ee
Ei --http2 ega --http1.1 anna teistsugust tulemust...
October 26, 2026 at 9:38 AM
hugovalters.bsky.social
CVE-2026-94083: type confusion in Suricata's DoH2 handling can trigger an invalid free via HTTP1-to-HTTP2 upgrade, CVSS 9.4. Patch to 8.0.7 now. #CVE #infosec #Suricata https://www.valtersit.com/cve/CVE-2026-94083/
October 27, 2026 at 8:10 AM
getpacketai.bsky.social
Istio's AuthorizationPolicy got bypassed via HTTP/2 lowercase method names—patch now if you rely on method-based access controls in your service mesh.

https://dev.to/amareswer/istio-authorizationpolicy-bypass-http2-method-case-bug-3ii8

#cloud #AWS
October 27, 2026 at 8:30 AM
kazukim.bsky.social
ネスペ(旧午前試験)受けた、とりあえず一次は通ったから安心
前回受けた際の午後問題、AS周りならある種仕方ないとはいえ、開発者にあるまじき(?)HTTP2を盛大に間違えてしまったのでちゃんと午後対策で勉強しなければ
October 27, 2026 at 4:18 AM
okami.mom
i just remembered http2 needs tls
October 23, 2026 at 1:10 PM
massann.bsky.social
何か脆弱性の説明的には、HTTP2とかのBrotli圧縮での通信するブラウザにも影響ありそうだけど、特にブラウザに影響あるとはどこも説明してないな
October 24, 2026 at 6:31 AM
thedailytechfeed.com
Tomcat patches auth bypass and data-leak flaws in HTTP/2, AJP — versions 11.0.27, 10.1.61, 9.0.123 must get applied. #ApacheTomcat #Cybersecurity #AuthBypass #HTTP2 #AJP #SecurityPatch https://thedailytechfeed.com/apache-tomcat-patches-eight-flaws-urges-rapid-upgrades/
October 21, 2026 at 9:57 AM
throwable.bsky.social
📦 eav93/wreq-php v1.5.10

PHP HTTP client with deterministic connection pooling and browser TLS/HTTP2 fingerprinting, built on the wreq Rust crate

🔗 https://github.com/eav93/wreq-php
October 21, 2026 at 7:08 AM
startdebugging.bsky.social
HttpClient's HTTP/2 PROTOCOL_ERROR is one RST_STREAM for one request and is never auto-retried. Usually a proxy sent it, not Kestrel.
https://startdebugging.net/2026/10/fix-the-http2-server-reset-the-stream-protocol-error-httpclient/?utm_source=bluesky&utm_medium=social&utm_campaign=auto
October 21, 2026 at 11:20 AM
hugovalters.bsky.social
Proxy gRPC with HAProxy 2.2+ using 'proto h2' for end-to-end HTTP/2 and h2c backend upgrades. Multiplex concurrent streams over fewer connections to slash churn. #haproxy #grpc #http2

https://www.valtersit.com/vault/http2-and-grpc-proxying-with-h2c-backend-upgrade-bbff1c/
October 19, 2026 at 5:22 PM
bagder.mastodon.social.ap.brid.gy
Welcome Martin Mirchev as #curl commit author 1552: https://github.com/curl/curl/pull/23472
http2: do not let a rate limit enlarge the stream window by Marti2203 · Pull Request #23472 · curl/curl
With a download rate limit, cf_h2_get_desired_local_win() uses the rate limiter's available bytes as the HTTP/2 stream window whenever they fit in an int32. A high limit therefore gives a much ...
github.com
October 19, 2026 at 10:16 AM
pires.dev
Off the oven, enjoy while it's hot.
Release v0.16.0 · pires/go-proxyproto
Breaking changes Not really breaking changes to the lib users but rather folks who adopted our HTTP2 helper/examples code. Upgrading golang.org/x/net to 0.61.0 required adopting the new API for HTT...
github.com
October 19, 2026 at 7:32 PM
cybermaster77.bsky.social
curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution

https://thehackernews.com/2026/10/curl-patches-http2-upload-flaw-after.html

#CyberSecurity #InfoSec
October 18, 2026 at 1:00 PM