Researchers exploit HTTP/2, WPA3 protocols to stage ‘timeless timing’ attacks
Summary:
“[For HTTP/2], we just need to make sure that both requests are placed in a single packet (e.g. by writing both to the socket at once)“
And then looking at the order of the packages when they get back.Now you have a way to measure computation time at the server, that opens up a whole range of attacks.