http

AI security interview questions tagged http, across every topic.

2 questions · 0 unlocked for you

Open full answer →

Open full answer →

Concepts behind "http"

Explanations of the mechanisms these questions rely on.

Application Security🔒 Premium

HTTP/2, HTTP/3 and Request SmugglingRequest smuggling happens when a front-end and a back-end parse the boundaries of HTTP/1.1 requests differently, so bytes an attacker sends are treated as the start of the next request on a shared connection. HTTP/2 and HTTP/3 use binary framing that removes that ambiguity, but proxies that accept HTTP/2 and forward HTTP/1.1 reintroduce it, and the new protocols bring their own denial-of-service classes, such as Rapid Reset, which drove record attack rates in 2023. Defences are strict parsing that rejects ambiguous framing, HTTP/2 end to end, per-connection budgets for resets and headers, and care with QUIC's 0-RTT and visibility.

Explore the full curriculum →