Hold on. AES is not <i>intrinsically</i> vulnerable to known-plaintext, like every modern cipher probably going back all the way to DES, but that doesn&#x27;t mean AES constructions can&#x27;t be attacked through known plaintext runs.<p>This particular text isn&#x27;t a vulnerability (after all, HTTP is full of known plaintext), but I think you&#x27;ve overplayed your argument. :)