Tag
http-security
Safeguard articles tagged "http-security" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Application Security
The security cost of long-lived HTTP connections
Keep-alive and HTTP/2 multiplexing cut handshake overhead but hold server resources open per connection — Slowloris and 2023's Rapid Reset attacks both exploited exactly that tradeoff.
Jul 8, 20266 min read
Security
CVE-2023-46589: The Tomcat Request Smuggling Flaw, Explained
CVE-2023-46589 lets an attacker smuggle HTTP requests past a reverse proxy by abusing malformed trailer headers in Apache Tomcat. Here is how it works and which versions to run.
Sep 30, 20256 min read
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.