Hacker News new | ask | show | jobs
by blauditore 989 days ago
What happens if you send more? Does it just get ignored by the server?
1 comments

For most current HTTP/2 implementations it'll just be ignored, and that is a problem. We've seen versions of the attack doing just that, as covered in the variants section of the article.

Servers should switch to closing the connection if clients exceed the stream limit too often, not just ignoring the bogus streams.