http1.dev HTTP/1.x must die

http1.dev quickly checks if a host exposes legacy HTTP/1.x attack surface instead of relying on HTTP/2 or HTTP/3.

Recently scanned
Latest
Host Age
'><asdf alt="">-f3f3
https://&:443#39;&%23x3e;&%2360;asdf%20alt=&%2334;&%23x22;&%2362;-f3f3
 13 minutes ago
Best (most modern)
Host Support
Worst (least modern)
Host Support
'><asdf alt="">-f3f3
https://&:443#39;&%23x3e;&%2360;asdf%20alt=&%2334;&%23x22;&%2362;-f3f3
 F (40)
This service is inspired in part by the HTTP/1.1 security concerns documented at http1mustdie.com. It is designed as a lightweight addition to ssllabs.com: run SSL Labs and follow its TLS/certificate/cipher recommendations, then use http1.dev to quickly spot legacy HTTP/1.x-only surfaces that are still missing HTTP/2 or HTTP/3.
Buy me a coffee