Adventures into HTTP2 and HTTP3

This blog post explains the evolution of HTTP from 1.x to HTTP/2 and HTTP/3 (QUIC), contrasting their transport behaviors (TCP vs. UDP), multiplexing, and browser/proxy handling, with demonstrations via Firefox, Burp, and Wireshark. It outlines practical setup considerations for enabling HTTP/2/3 on servers and CDNs, and discusses security implications such as UDP/443 exposure, WAF inspection challenges, and known HTTP/2 implementation vulnerabilities, noting that HTTP/3 adoption is still maturing.