@BRIAN_____ @scarybeasts If only we could go back in time and add ALPN support to all FTP over TLS clients.
@agl__ @BRIAN_____ @scarybeasts this particular attack would be blocked by blocking "http/1.1" and other incompat ALPN on FTPS servers
-
-
@agl__@BRIAN_____@scarybeasts luckily, all the browsers already send ALPN anyway, right? -
@tehjh stupid question: isn't an HTTP response different from an FTP response? Is also another case where browsers forgiving nature helped - 4 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.