HTTP/1.1 must die: Dafydd Stuttard on what this means for enterprise security

Read post on portswigger.net

At Black Hat USA 2025 and DEF CON 33, PortSwigger's Director of Research, James Kettle, unveiled new HTTP desync techniques that prove one thing beyond doubt: HTTP/1.1 is broken, and every organizatio