#hrs — Public Fediverse posts

For my proposal to defend against #HTTP 1.1 Request Smuggling vulnerabilities by adding in some changes at the protocol layer, I've published a new version at:

    https://datatracker.ietf.org/doc/html/draft-nygren-httpbis-http11-request-binding-01

It is still in early stages, but the biggest changes are:

- Defines an explicit Threat Model for what is and isn't intended to be protected

- Includes a Bound-Request-Init header field to negotiate a mechanism,  including support for crypto agility and for inband communication of a key.  This allows this to be used without TLS Exporters and hopefully allows for a much simpler minimum-viable implementation.

- Include siphash-2-4 as an alternate hash function as part of an inband mechanism to potentially address concerns about cryptographic overhead.

- Suggest a separate ALPN as a possible negotiation mechanism.  (This is used alongside the Bound-Request-Init header which configures   the actual details, but we do need some out-of-band mechanism in the TLS  handshake to signal support here.)

#HRS #IETF

For my proposal to defend against #HTTP 1.1 Request Smuggling vulnerabilities by adding in some changes at the protocol layer, I've published a new version at:

    https://datatracker.ietf.org/doc/html/draft-nygren-httpbis-http11-request-binding-01

It is still in early stages, but the biggest changes are:

- Defines an explicit Threat Model for what is and isn't intended to be protected

- Includes a Bound-Request-Init header field to negotiate a mechanism,  including support for crypto agility and for inband communication of a key.  This allows this to be used without TLS Exporters and hopefully allows for a much simpler minimum-viable implementation.

- Include siphash-2-4 as an alternate hash function as part of an inband mechanism to potentially address concerns about cryptographic overhead.

- Suggest a separate ALPN as a possible negotiation mechanism.  (This is used alongside the Bound-Request-Init header which configures   the actual details, but we do need some out-of-band mechanism in the TLS  handshake to signal support here.)

#HRS #IETF

For my proposal to defend against #HTTP 1.1 Request Smuggling vulnerabilities by adding in some changes at the protocol layer, I've published a new version at:

    https://datatracker.ietf.org/doc/html/draft-nygren-httpbis-http11-request-binding-01

It is still in early stages, but the biggest changes are:

- Defines an explicit Threat Model for what is and isn't intended to be protected

- Includes a Bound-Request-Init header field to negotiate a mechanism,  including support for crypto agility and for inband communication of a key.  This allows this to be used without TLS Exporters and hopefully allows for a much simpler minimum-viable implementation.

- Include siphash-2-4 as an alternate hash function as part of an inband mechanism to potentially address concerns about cryptographic overhead.

- Suggest a separate ALPN as a possible negotiation mechanism.  (This is used alongside the Bound-Request-Init header which configures   the actual details, but we do need some out-of-band mechanism in the TLS  handshake to signal support here.)

#HRS #IETF

For my proposal to defend against #HTTP 1.1 Request Smuggling vulnerabilities by adding in some changes at the protocol layer, I've published a new version at:

    https://datatracker.ietf.org/doc/html/draft-nygren-httpbis-http11-request-binding-01

It is still in early stages, but the biggest changes are:

- Defines an explicit Threat Model for what is and isn't intended to be protected

- Includes a Bound-Request-Init header field to negotiate a mechanism,  including support for crypto agility and for inband communication of a key.  This allows this to be used without TLS Exporters and hopefully allows for a much simpler minimum-viable implementation.

- Include siphash-2-4 as an alternate hash function as part of an inband mechanism to potentially address concerns about cryptographic overhead.

- Suggest a separate ALPN as a possible negotiation mechanism.  (This is used alongside the Bound-Request-Init header which configures   the actual details, but we do need some out-of-band mechanism in the TLS  handshake to signal support here.)

#HRS #IETF

For my proposal to defend against #HTTP 1.1 Request Smuggling vulnerabilities by adding in some changes at the protocol layer, I've published a new version at:

    https://datatracker.ietf.org/doc/html/draft-nygren-httpbis-http11-request-binding-01

It is still in early stages, but the biggest changes are:

- Defines an explicit Threat Model for what is and isn't intended to be protected

- Includes a Bound-Request-Init header field to negotiate a mechanism,  including support for crypto agility and for inband communication of a key.  This allows this to be used without TLS Exporters and hopefully allows for a much simpler minimum-viable implementation.

- Include siphash-2-4 as an alternate hash function as part of an inband mechanism to potentially address concerns about cryptographic overhead.

- Suggest a separate ALPN as a possible negotiation mechanism.  (This is used alongside the Bound-Request-Init header which configures   the actual details, but we do need some out-of-band mechanism in the TLS  handshake to signal support here.)

#HRS #IETF

https://www.europesays.com/no/258052/ HRS, DMS | Brev til helseministeren: Kom til Møre og Romsdal så raskt som mogeleg #arbeiderpartiet #art #barneavdelingen #BreakingNews #BreakingNews #dms #FeaturedNews #FeaturedNews #Headlines #HelseMøreOgRomsdal #hrs #JanChristianVestre #LatestNews #LatestNews #Meninger #News #NO #Norge #Norway #Nyheter #opinion #Overskrifter #TopStories #TopStories

Pittsburgh Pirates 6 St. Louis Cardinals 2 (May 21, 2026) https://www.rawchili.com/mlb/705277/ #Baseball #BrandonLowe #Cardinals #Davis #friday #Griffin #HenryDavis #hit #hrs #InsideTheParkHomeRun #IvanHerrera #KonnorGriffin #Lowe #MarcellOzuna #May #MLB #PittsburghPirates #run #Series #StLouis #StLouisCardinals #StLouis #StLouisCardinals #walk

Pittsburgh Pirates 6 St. Louis Cardinals 2 (May 21, 2026) https://www.rawchili.com/mlb/705277/ #Baseball #BrandonLowe #Cardinals #Davis #friday #Griffin #HenryDavis #hit #hrs #InsideTheParkHomeRun #IvanHerrera #KonnorGriffin #Lowe #MarcellOzuna #May #MLB #PittsburghPirates #run #Series #StLouis #StLouisCardinals #StLouis #StLouisCardinals #walk

Scheinbar Datenschutz Vorfall beim Hotel Portal #hrs
Gibt zumindest ne interne info mail des Dienstreisemanagement dazu.

Hab aber nicht mehr dazu finden können. Ist das schon älter?

Scheinbar Datenschutz Vorfall beim Hotel Portal #hrs
Gibt zumindest ne interne info mail des Dienstreisemanagement dazu.

Hab aber nicht mehr dazu finden können. Ist das schon älter?

Scheinbar Datenschutz Vorfall beim Hotel Portal #hrs
Gibt zumindest ne interne info mail des Dienstreisemanagement dazu.

Hab aber nicht mehr dazu finden können. Ist das schon älter?

Scheinbar Datenschutz Vorfall beim Hotel Portal #hrs
Gibt zumindest ne interne info mail des Dienstreisemanagement dazu.

Hab aber nicht mehr dazu finden können. Ist das schon älter?

Scheinbar Datenschutz Vorfall beim Hotel Portal #hrs
Gibt zumindest ne interne info mail des Dienstreisemanagement dazu.

Hab aber nicht mehr dazu finden können. Ist das schon älter?

https://www.europesays.com/no/167231/ Savnet, Åsane | Savnet kvinne ennå ikke funnet #Ambulanse #art #åsane #BreakingNews #BreakingNews #FeaturedNews #FeaturedNews #Headlines #hrs #LatestNews #LatestNews #News #NO #Norge #Norway #Nyheter #Overskrifter #Politi #savnet #story #TopStories #TopStories

Croatia Wins Bronze at EHF EURO 2026!

Croatia beat Iceland in the match for third place at the EHF EURO 2026, winning 34-33 to take…
#Croatia #HR #Europe #Europa #EU #croatia #croatiahandball #croatianhandballassociation #EHFEURO2026 #hrs #hrvatska #vijesti
https://www.europesays.com/2748815/

Croatia Earn Crucial Win Over Iceland in Battle for EHF EURO Semi-Finals https://www.byteseu.com/1739508/ #Croatia #CroatiaHandball #CroatiaIceland #EhfEuro #EHFEURO2026 #hrs

Croatia Earn Crucial Win Over Iceland in Battle for EHF EURO Semi-Finals

Croatia’s handball team opened the main round of the EHF Euro 2026 with a vital 30:29 victory over…
#Croatia #HR #Europe #Europa #EU #croatia #croatiahandball #croatiaiceland #ehfeuro #EHFEURO2026 #hrs #hrvatska #vijesti
https://www.europesays.com/2725631/

EHF Euro 2026: Croatia Opens Tournament with Win Against Georgia (32-29)

The Croatia men’s handball team opened its European Championship campaign with a 32–29 win over Georgia in Group…
#Croatia #HR #Europe #Europa #EU #croatia #croatiageorgia #croatiahandball #ehf #EHF2026 #europeanhandballchampionships #hrs #hrvatska #vijesti
https://www.europesays.com/2711665/

https://www.europesays.com/no/122785/ Leteaksjon, Politi | Kvinne meldt savnet etter fest: – Ble funnet i god behold #art #BreakingNews #BreakingNews #FeaturedNews #FeaturedNews #Headlines #Hovedoppslag #hrs #LatestNews #LatestNews #leteaksjon #MainNews #MainNews #News #NO #Norge #Norway #Nyheter #Overskrifter #Politi #SavnetPerson #smøla #story #TopStories #TopStories

https://www.europesays.com/no/121456/ Redningsaksjon, Båt | Reddet lasteskip med sju mann: – De hadde flaks #art #båt #BreakingNews #BreakingNews #FeaturedNews #FeaturedNews #grip #Headlines #hrs #kristiansund #LatestNews #LatestNews #News #NO #Norge #Norway #Nyheter #Overskrifter #redningsaksjon #redningsselskapet #story #TopStories #TopStories

I published a new #IETF draft last week for a proposed defense against #HRS (HTTP Request Smuggling) vulnerabilities in HTTP/1.1. It's intended for use between Intermediaries (eg, CDNs and reverse proxies) and origin servers. It uses TLS Exporters (or other keys in a local context) to cryptographically protect message context (eg, the equivalent of H2 and H3 stream IDs) but in a way that attackers can't influence. It is still an early-stage -00 draft so I'm looking for general interest from potential implementers.

https://datatracker.ietf.org/doc/html/draft-nygren-httpbis-http11-request-binding

#http1

I published a new #IETF draft last week for a proposed defense against #HRS (HTTP Request Smuggling) vulnerabilities in HTTP/1.1. It's intended for use between Intermediaries (eg, CDNs and reverse proxies) and origin servers. It uses TLS Exporters (or other keys in a local context) to cryptographically protect message context (eg, the equivalent of H2 and H3 stream IDs) but in a way that attackers can't influence. It is still an early-stage -00 draft so I'm looking for general interest from potential implementers.

https://datatracker.ietf.org/doc/html/draft-nygren-httpbis-http11-request-binding

#http1

I published a new #IETF draft last week for a proposed defense against #HRS (HTTP Request Smuggling) vulnerabilities in HTTP/1.1. It's intended for use between Intermediaries (eg, CDNs and reverse proxies) and origin servers. It uses TLS Exporters (or other keys in a local context) to cryptographically protect message context (eg, the equivalent of H2 and H3 stream IDs) but in a way that attackers can't influence. It is still an early-stage -00 draft so I'm looking for general interest from potential implementers.

https://datatracker.ietf.org/doc/html/draft-nygren-httpbis-http11-request-binding

#http1

I published a new #IETF draft last week for a proposed defense against #HRS (HTTP Request Smuggling) vulnerabilities in HTTP/1.1. It's intended for use between Intermediaries (eg, CDNs and reverse proxies) and origin servers. It uses TLS Exporters (or other keys in a local context) to cryptographically protect message context (eg, the equivalent of H2 and H3 stream IDs) but in a way that attackers can't influence. It is still an early-stage -00 draft so I'm looking for general interest from potential implementers.

https://datatracker.ietf.org/doc/html/draft-nygren-httpbis-http11-request-binding

#http1

I published a new #IETF draft last week for a proposed defense against #HRS (HTTP Request Smuggling) vulnerabilities in HTTP/1.1. It's intended for use between Intermediaries (eg, CDNs and reverse proxies) and origin servers. It uses TLS Exporters (or other keys in a local context) to cryptographically protect message context (eg, the equivalent of H2 and H3 stream IDs) but in a way that attackers can't influence. It is still an early-stage -00 draft so I'm looking for general interest from potential implementers.

https://datatracker.ietf.org/doc/html/draft-nygren-httpbis-http11-request-binding

#http1

土橋皇太が2025年度ホンダレーシングスクール鈴鹿のスカラシップを獲得
https://www.as-web.jp/domestic/1258650

#asweb #国内レース他 #HRS #ホンダレーシングスクール鈴鹿 #土橋皇太

🥳 #RSS #HRS

🥳 #RSS #HRS

🥳 #RSS #HRS

🥳 #RSS #HRS

HRS鈴鹿が『サマースクール2025』を開催。EXGEL MAX CHAMPとコラボレーション
https://www.as-web.jp/domestic/1234329

#asweb #国内レース他 #HRS #中野信治 #佐藤琢磨 #佐藤蓮 #野村勇斗 #鈴鹿サーキット

Presenting our new #HRS threads for training 🧵🔵

#S04

Presenting our new #HRS threads for training 🧵🔵

#S04

Conspiracy theory: hobbies aren't real. They're created by HRs for #HRs to make their life easier. Actual people have either (probably unhealthy) #obsessions or no energy/time to do anything remotely resembling a #hobby

Conspiracy theory: hobbies aren't real. They're created by HRs for #HRs to make their life easier. Actual people have either (probably unhealthy) #obsessions or no energy/time to do anything remotely resembling a #hobby

Conspiracy theory: hobbies aren't real. They're created by HRs for #HRs to make their life easier. Actual people have either (probably unhealthy) #obsessions or no energy/time to do anything remotely resembling a #hobby

Conspiracy theory: hobbies aren't real. They're created by HRs for #HRs to make their life easier. Actual people have either (probably unhealthy) #obsessions or no energy/time to do anything remotely resembling a #hobby

Conspiracy theory: hobbies aren't real. They're created by HRs for #HRs to make their life easier. Actual people have either (probably unhealthy) #obsessions or no energy/time to do anything remotely resembling a #hobby

Planleggingskveld på #SARQueen.... #HRS

Planleggingskveld på #SARQueen.... #HRS

Planleggingskveld på #SARQueen.... #HRS

Planleggingskveld på #SARQueen.... #HRS

@solonovamax

Toys / chew-things. Bunnies need to be busy, or they can get destructive or even mean. Cardboard boxes they can hide in and do "#bunstruction" on. I like to close them up and cut a little tunnel hole on two sides so it's like a burrow.

Safe chew toys - stuff intended for rabbits, not full of chemicals. Wood or wood-adjacent things like wicker. You can get little houses/cottages of thin plywood that slot together that a lot of them like, and they double as hidey-holes.

Read as much as you can about house rabbits - the House Rabbit Society (rabbit.org) has a lot of good info on care, behaviour, etc.

Social interaction. Rabbits are social creatures. Get down on the floor and play with them. Play with rabbits is different than dogs or cats - those are both predators, while rabbits are prey animals, and have very different psychology. I wrote a long thread about thinking like a rabbit (and crammed it full of cute #photos of some of our rabbits so people would actually look at it 😀 ) that starts here:
https://mindly.social/@cazabon/109882459730036423

You may want to think about a second rabbit (though read up about bonding first), because of the social aspect.

There's a good, active community of house rabbit ~~owners~~ servants in the #fediverse. Tagging posts with #HouseRabbit and #RabbitsOfMastodon will get you a lot more visibility.

But probably the single most important thing: get them #spayed or #neutered! Find a vet specializing in rabbits!

#HouseRabbitSociety #HRS

@solonovamax

Toys / chew-things. Bunnies need to be busy, or they can get destructive or even mean. Cardboard boxes they can hide in and do "#bunstruction" on. I like to close them up and cut a little tunnel hole on two sides so it's like a burrow.

Safe chew toys - stuff intended for rabbits, not full of chemicals. Wood or wood-adjacent things like wicker. You can get little houses/cottages of thin plywood that slot together that a lot of them like, and they double as hidey-holes.

Read as much as you can about house rabbits - the House Rabbit Society (rabbit.org) has a lot of good info on care, behaviour, etc.

Social interaction. Rabbits are social creatures. Get down on the floor and play with them. Play with rabbits is different than dogs or cats - those are both predators, while rabbits are prey animals, and have very different psychology. I wrote a long thread about thinking like a rabbit (and crammed it full of cute #photos of some of our rabbits so people would actually look at it 😀 ) that starts here:
https://mindly.social/@cazabon/109882459730036423

You may want to think about a second rabbit (though read up about bonding first), because of the social aspect.

There's a good, active community of house rabbit ~~owners~~ servants in the #fediverse. Tagging posts with #HouseRabbit and #RabbitsOfMastodon will get you a lot more visibility.

But probably the single most important thing: get them #spayed or #neutered! Find a vet specializing in rabbits!

#HouseRabbitSociety #HRS

@solonovamax

Toys / chew-things. Bunnies need to be busy, or they can get destructive or even mean. Cardboard boxes they can hide in and do "#bunstruction" on. I like to close them up and cut a little tunnel hole on two sides so it's like a burrow.

Safe chew toys - stuff intended for rabbits, not full of chemicals. Wood or wood-adjacent things like wicker. You can get little houses/cottages of thin plywood that slot together that a lot of them like, and they double as hidey-holes.

Read as much as you can about house rabbits - the House Rabbit Society (rabbit.org) has a lot of good info on care, behaviour, etc.

Social interaction. Rabbits are social creatures. Get down on the floor and play with them. Play with rabbits is different than dogs or cats - those are both predators, while rabbits are prey animals, and have very different psychology. I wrote a long thread about thinking like a rabbit (and crammed it full of cute #photos of some of our rabbits so people would actually look at it 😀 ) that starts here:
https://mindly.social/@cazabon/109882459730036423

You may want to think about a second rabbit (though read up about bonding first), because of the social aspect.

There's a good, active community of house rabbit ~~owners~~ servants in the #fediverse. Tagging posts with #HouseRabbit and #RabbitsOfMastodon will get you a lot more visibility.

But probably the single most important thing: get them #spayed or #neutered! Find a vet specializing in rabbits!

#HouseRabbitSociety #HRS

@solonovamax

Toys / chew-things. Bunnies need to be busy, or they can get destructive or even mean. Cardboard boxes they can hide in and do "#bunstruction" on. I like to close them up and cut a little tunnel hole on two sides so it's like a burrow.

Safe chew toys - stuff intended for rabbits, not full of chemicals. Wood or wood-adjacent things like wicker. You can get little houses/cottages of thin plywood that slot together that a lot of them like, and they double as hidey-holes.

Read as much as you can about house rabbits - the House Rabbit Society (rabbit.org) has a lot of good info on care, behaviour, etc.

Social interaction. Rabbits are social creatures. Get down on the floor and play with them. Play with rabbits is different than dogs or cats - those are both predators, while rabbits are prey animals, and have very different psychology. I wrote a long thread about thinking like a rabbit (and crammed it full of cute #photos of some of our rabbits so people would actually look at it 😀 ) that starts here:
https://mindly.social/@cazabon/109882459730036423

You may want to think about a second rabbit (though read up about bonding first), because of the social aspect.

There's a good, active community of house rabbit ~~owners~~ servants in the #fediverse. Tagging posts with #HouseRabbit and #RabbitsOfMastodon will get you a lot more visibility.

But probably the single most important thing: get them #spayed or #neutered! Find a vet specializing in rabbits!

#HouseRabbitSociety #HRS

@solonovamax

Toys / chew-things. Bunnies need to be busy, or they can get destructive or even mean. Cardboard boxes they can hide in and do "#bunstruction" on. I like to close them up and cut a little tunnel hole on two sides so it's like a burrow.

Safe chew toys - stuff intended for rabbits, not full of chemicals. Wood or wood-adjacent things like wicker. You can get little houses/cottages of thin plywood that slot together that a lot of them like, and they double as hidey-holes.

Read as much as you can about house rabbits - the House Rabbit Society (rabbit.org) has a lot of good info on care, behaviour, etc.

Social interaction. Rabbits are social creatures. Get down on the floor and play with them. Play with rabbits is different than dogs or cats - those are both predators, while rabbits are prey animals, and have very different psychology. I wrote a long thread about thinking like a rabbit (and crammed it full of cute #photos of some of our rabbits so people would actually look at it 😀 ) that starts here:
https://mindly.social/@cazabon/109882459730036423

You may want to think about a second rabbit (though read up about bonding first), because of the social aspect.

There's a good, active community of house rabbit ~~owners~~ servants in the #fediverse. Tagging posts with #HouseRabbit and #RabbitsOfMastodon will get you a lot more visibility.

But probably the single most important thing: get them #spayed or #neutered! Find a vet specializing in rabbits!

#HouseRabbitSociety #HRS

佐藤凛太郎と新原光太郎が2024年度ホンダレーシングスクール鈴鹿のスカラシップを獲得
https://www.as-web.jp/domestic/1158261

#asweb #国内レース他 #HRS #HRS_Suzuka #ホンダレーシングスクール鈴鹿 #佐藤凛太郎 #新原光太郎