HTTP/2: The Sequel is Always Worse
portswigger.net