TrendLabs: How Unsecure gRPC Implementations Can Compromise APIs, Applications

 

Figure 1. A visualization of how HTTP/1.0 differs from HTTP/2 when it comes to requests and replies

REF: https://blog.trendmicro.com/trendlabs-security-intelligence/unsecure-grpc-implementations-compromise-apis-applications/