The Evil Alt-Ego: (ab)using HTTP Alternative Services

The HTTP Alternative Services header (Alt-Svc, RFC 7838) was introduced in 2013 by seasoned developers with good intentions in a bid to streamline load balancing, protocol optimizations, and client segmentation…

By: David Starobinski, Trishita Tiwari & Ari Trachtenberg

Full Abstract & Presentation Materials:
https://www.blackhat.com/asia-20/briefings/schedule/#the-evil-alt-ego-abusing-http-alternative-services-18822Black HatRead More