HTTP/2 Implementation Errors Exposing Websites to Serious Risks

Organizations that don’t implement end-to-end HTTP/2 are vulnerable to attacks that redirect users to malicious sites and other threats, security researcher reveals at Black Hat USA.