Re: HTTP is just fine -- v. HTTP is insecure --> need a better metaphor

> This is the second time I read ddos amplification in this thread.
> 
> DDOS amplification is an issue where UDP services (mostly ntp and dns)
> send a reply to potentially forged packets that is larger than the sent
> package. This can be abused for ddos attacks.
> 
> This has nothing to do with https. Not at all. HTTPS won't make ddos
> amplification any different, it happens on completely different
> protocols.

Not true at all there are many forms, SSL as a form of amplification can
wreak major havoc. A 100x amplification was demonstrated by tying
together attacks involving DNSSEC and TLS.

https://www.stateoftheinternet.com/types-of-ddos-attacks.html

-- 

KISSIS - Keep It Simple So It's Securable