HTTP Desync Attacks: what happened next
PortSwigger researcher James Kettle reports that after publishing HTTP Desync Attacks: Request Smuggling Reborn, Akamai deployed a hotfix roughly 48 hours after his presentation so its front-end servers prioritize chunked Transfer-Encoding by default, F5...