Glance

  1. Series icehouse
  2. Bug #1361360
  3. Comment #34

Comment 34 for bug 1361360

Revision history for this message
Thierry Carrez (ttx) wrote :

@Stuart: If I understand correctly, you're describing a Slowloris attack, for which there is no great solution, only mitigation... But then, why close a keepalive-based hole if we keep a simpler one open ? If we require security proxies on open API ports anyway, why close the keepalive hole ? I'll discuss this with the Vulnerability Management Team today.