Mathy Vanhoef

Request and conquer: exposing cross-origin resource size

2016 · Lirias

Numerous initiatives are encouraging website owners to enable and enforce TLS encryption for the communication between the server and their users. Although this encryption, when configured properly, completely prevents adversaries from disclosing the content of …