http1.dev HTTP/1.x must die

http1.dev quickly checks if a host exposes legacy HTTP/1.x attack surface instead of relying on HTTP/2 or HTTP/3.

This service is inspired in part by the HTTP/1.1 security concerns documented at http1mustdie.com. It is designed as a lightweight addition to ssllabs.com: run SSL Labs and follow its TLS/certificate/cipher recommendations, then use http1.dev to quickly spot legacy HTTP/1.x-only surfaces that are still missing HTTP/2 or HTTP/3.
Buy me a coffee