Cyber Risks · PortSwigger Research

Professional / Community 2020.6

Summary: PortSwigger released Burp Suite Professional/Community 2020.6 on 3 July 2020, adding an option to use HTTP/2 for inbound and outbound communication over TLS from the Project settings HTTP tab, described as experimental. The release also lets users control the TLS protocols Burp Proxy uses in negotiation with the browser and adds a tooltip showing decoded data when hovering over URL-encoded data in HTTP history.

What you should know: The HTTP/2 support ships as experimental and PortSwigger tells users to enable it at their own discretion, so teams testing HTTP/2 targets are relying on a feature the vendor has not yet declared production-ready.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related