httptoolkit.com on Hacker News

What is X-Forwarded-For and when can you trust it? (2024)(httptoolkit.com)

55 points by ayoisaiah 1 year ago | 17 comments

HTTP/3 is everywhere but nowhere(httptoolkit.com)

387 points by doener 1 year ago | 429 comments

HTTP Toolkit blog post by Tim Perry arguing HTTP/3 is widely deployed by browsers and CDNs but poorly supported in open-source tools and libraries.

Android 14 blocks all modification of system certificates, even as root(httptoolkit.com)

278 points by pimterry 3 years ago | 188 comments

Apple already shipped attestation on the web, and we barely noticed(httptoolkit.com)

413 points by pimterry 3 years ago | 300 comments

HTTP Toolkit blog post arguing that Apple's Private Access Tokens already brought device attestation to the web, in the context of Google's Web Environment Integrity proposal.

Leaking secrets through caching with Bunny CDN(httptoolkit.com)

68 points by soopurman 3 years ago | 1 comments

Defining a new HTTP method: HTTP Search (2021)(httptoolkit.com)

153 points by thunderbong 3 years ago | 121 comments