Amazonian SDE is sharing, 'cause sharing is caring 👨💻
note: I do not represent any of my employers in this channel
Post #276
528
Forwarded from Software Engineer Updates
YouTube How HTTP Compression Can Leak Sessions and JWTs - CRIME Explained and how HPACK in HTTP/2 fixes this In this video we will explore one of the most popular side attacks CRIME Compression Ratio Info-leak Made Easy) and the different ways to mitigate this. Intro 0:00 * HTTP/1.1 SPDY header compression 4:00 * TLS compression * Response body attackers can’t…