This repository was archived by the owner on Jan 22, 2025. It is now read-only.
This repository was archived by the owner on Jan 22, 2025. It is now read-only.
Start https server with defined timeout values #78
Description
Describe the bug
HTTP timeouts are necessary to expire inactive connections and failing to do so might make the application vulnerable to attacks like slowloris which work by sending data very slow, which in case of no timeout will keep the connection active eventually leading to a denial-of-service (DoS) attack. (CWE-400)
Lifted from:
neicnordic/sda-s3proxy#293
May be relevant for other https servers in setup? Web?