Firefox 37.0 added support for a security-enhancing feature in HTTP/2 known as Alternative Services.
Unfortunately, the new feature had a rather bad HTTPS security hole all of its own...![]()
![]()
↧