On October 10, 2023, Cloudflare, Google and AWS disclosed HTTP/2 Rapid Reset, tracked as CVE-2023-44487. The technique had been used in large distributed denial-of-service attacks. It illustrated how protocol behavior could put pressure on a service before an application processed a normal request. A risk to service availability HTTP/2 supports multiple exchanges over a connection. Rapid Reset abused the handling of streams and their cancellation to impose disproportionate...
On October 5, 2023, the World Wide Web Consortium published WCAG 2.2 as a W3C Recommendation. The update added nine accessibility success criteria. For businesses, it offered more specific guidance for designing website tasks that people can complete with different ways of seeing, moving, understanding and interacting. Look at the obstacles within a real task The new criteria address issues including keyboard focus hidden by page content, dragging interactions, target...
July 1, 2023 marked the start of the end of new-data processing for standard Universal Analytics properties. Google had set out this milestone in its transition announcement. Analytics 360 properties had a separate extension. For website owners, the change highlighted a practical responsibility: verify that the reports used for decisions still reflect the actions taking place on the site. Define a useful result before configuring a report Google Analytics 4 uses an...
On June 5, 2023, Google began rolling out an open beta that let Workspace administrators allow users to sign in with passkeys instead of entering a password. The launch announcement described a gradual rollout and an administrator-controlled option. This was a milestone in workplace authentication, not an automatic switch for every organization. Reduce the role of passwords in everyday work Passkeys use public-key cryptography to provide phishing-resistant authentication....
