Cross-Origin Web Attacks via HTTP/2 Server Push and Signed HTTP Exchange
Introduces the security implications of HTTP/2 server push and signed HTTP exchange (SXG) on the Same-Origin Policy (SOP), a fundamental web security mechanism designed to prevent cross-origin attacks.
Summary
No summary yet — watch the video above, or open it on YouTube.
Related talks
Briefings·40 min
Koh Nakagawa
The macOS threat landscape has changed considerably in recent years with the ever-increasing prevalence of macOS malware.
Briefings·33 min
Hayato Kimura · Ryoma Ito · Kazuhiko Minematsu · Shogo Shiraki · Takanori Isobe
Nostr is an emerging open-source, decentralized social networking protocol with over 1.1 million users—and a critical blind spot in its security design.
Briefings·21 min
Fengyu Liu · YouKun Shi · Tian Chen · Bocheng Xiang · Junyao He · Qi Li · Guangliang Yang · Yuan Zhang · Min Yang
Microservice architecture has become increasingly popular for building scalable and maintainable applications.