http2

LayerOne Information Security Conference·35 min

• LAYERONE
• Hardware
• Date: 2025
• Location: Layerone

Industry experts analyze emerging threats surrounding LayerOne 2018 - HTTP2 and You (Security Panda).

Main Stage·40 min

• DEF CON
• AppSec
• Date: Aug 2021
• Location: Las Vegas

James Kettle

PortSwigger researcher James Kettle pioneers HTTP/2 request smuggling, uncovering critical implementation flaws when front-end reverse proxies downgrade to back-end HTTP/1.1.

Main Stage·42 min

• DEF CON
• AppSec
• Date: Aug 2021
• Location: Las Vegas

Tom Van Goethem · Mathy Vanhoef

Tom Van Goethem and Mathy Vanhoef introduce timeless timing attacks, using HTTP/2 multiplexing to measure microsecond server execution differences over high-jitter networks.