H2C Smuggling

H2C Security Issue

What is H2C? H2C (HTTP/2 Cleartext) is an implementation of HTTP/2 over plain text instead of encrypted connections. This approach can expose data to interception, making it vulnerable to attacks.

The Risk: Misconfigurations or forced downgrades can allow attackers to bypass HTTPS and access sensitive traffic unencrypted. It highlights the importance of enforcing secure configurations for HTTP/2 traffic.

This is the printer-friendly version. See the colour H2C Smuggling flyer.