Explore the latest advancements in web protocols through this 34-minute Black Hat conference talk that delves into QUIC, a new always-encrypted general-purpose transport protocol, and HTTP/3. Compare these emerging technologies to HTTP/2, examining their protocol stacks, handshake processes, and security features. Learn about transport parameters, packet headers, connection IDs, and the crypto handshake. Gain insights into address validation, including tokens and ZeroRTT handshake. Understand the security considerations and implications of these protocols for the future of web communication.
Securing the Next Version of HTTP - How QUIC and HTTP-3 Compare to HTTP-2
Overview
Syllabus
Introduction
Protocol Stack
Transport Handshake
Address Validation
Transport Parameters
Packet Headers
Connection IDs
Crypto Handshake
Security Considerations
Address Validation Tokens
ZeroRTT Handshake
Summary
Taught by
Black Hat
Related Courses
-
HTTP - 3 Is Next Generation HTTP - Is It QUIC Enough
-
Down the Line - Evolving HTTP and Making Things QUIC
-
HTTP/3 is Next Generation HTTP - Is it QUIC Enough?
-
HTTP/2 & QUIC - Teaching Good Protocols to Do Bad Things
-
HTTP/2 - What You Need to Know
-
Hacking HTTP/2 - New Attacks on the Internet's Next Generation Foundation
