Later archive addition

Host of Troubles: Multiple Host Ambiguities in HTTP Implementations

Jianjun Chen, Jian Jiang, Haixin Duan, Nicholas Weaver, Tao Wan and Vern Paxson · ACM

The paper studies inconsistent Host-field parsing across 33 HTTP implementations and turns those discrepancies into cache poisoning and security-policy bypasses. It demonstrates attacks against proxies, CDNs, and firewalls, then measures exposure among users behind transparent caches.

Record

Researcher

Jianjun Chen, Jian Jiang, Haixin Duan, Nicholas Weaver, Tao Wan and Vern Paxson

Published by

ACM

Format

Whitepaper

In the archive

• Added to the 2016–17 archive after the original list was published

Related sources

• Project page

Tags

• http
• parser-differential
• cache-poisoning
• policy-bypass
• proxy
• cdn

This page is the archive's own catalogue record. The research is the work of Jianjun Chen, Jian Jiang, Haixin Duan, Nicholas Weaver, Tao Wan and Vern Paxson, first published at the original source. Preserved copies are kept so the citation survives its host.