Collected research

Improving HTTPS Side Channel Attacks

Improving HTTPS Side Channel Attacks ha.ckers.org web application security lab

Proposes reducing the noise in HTTPS traffic-analysis attacks by pre-caching. From a man-in-the-middled HTTP page the attacker iframes the target site to force images, CSS, JavaScript and favicons into cache, so later requests shrink to 304 responses and the remaining encrypted sizes isolate the pages the victim actually visits.

Record

Document

Improving HTTPS Side Channel Attacks ha.ckers.org web application security lab

Published by

ha.ckers.org

Topic

HTTP

In the archive

• Collected in the 2010 research round

Tags

• https
• side-channel
• tls
• cache
• info-leak
• iframe
• timing-attack
• owasp-a02-2021

This page is the archive's own catalogue record. The research is the work of ha.ckers.org, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.