I am working on this pet project of mine, and I had an HTTP service built 
with akka-http on-line. The other day I found out it was unavailable, and 
when I checked in the logs it appears I was a victim of this attack:

http://www.skepticism.us/2015/05/13/

I lost the error message, but it was pretty clear that the described 
request dropped my server, and the problem was the absence of the `Host` 
header.

Now, isn't this something akka-http, or any HTTP server or framework, 
should be robust to? Is there anything I should or could have done as a 
user to prevent this problem, or should I be filing a bug report? Also, 
what is a proper way to keep the service running? I was just calling sbt 
from the command line, really experimental, I know there are better ways 
out there but I don't know where to start.

Thanks,
    ++nic

-- 
>>>>>>>>>>      Read the docs: http://akka.io/docs/
>>>>>>>>>>      Check the FAQ: 
>>>>>>>>>> http://doc.akka.io/docs/akka/current/additional/faq.html
>>>>>>>>>>      Search the archives: https://groups.google.com/group/akka-user
--- 
You received this message because you are subscribed to the Google Groups "Akka 
User List" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/akka-user.
For more options, visit https://groups.google.com/d/optout.

Reply via email to