HTTP/3, the latest major version of the Hypertext Transfer Protocol, had its specification finalized in June 2022. This version is designed to enhance performance, reliability, and security. Unlike its predecessors, HTTP/3 utilizes QUIC instead of TCP as its transport layer. QUIC is a UDP-based, multiplexed, and secure transport protocol that includes built-in TLS 1.3 encryption, making QUIC encrypted by default. To learn more about the performance and benefits of HTTP/3, check out What is HTTP/3. For information on browser adoption, take a look at Examining HTTP/3 Usage, which also provides…

The Reactor Netty 1.0.24 release on October 11 included fix for CVE-2022-31684 affecting Reactor Netty HTTP Server. Users are encouraged to update as soon as possible. Reactor Netty is used internally in many frameworks including Spring WebFlux and its WebClient. If you have a Spring Boot application, you can upgrade to Reactor BOM 2020.0.24.