http1.dev HTTP/1.x must die

http1.dev quickly checks if a host exposes legacy HTTP/1.x attack surface instead of relying on HTTP/2 or HTTP/3.

Recently scanned
Latest
Host Age
%2527%253E%253Casdf%2520alt%253D%2522%2522%253E-f3f3
https://%2527%253E%253Casdf%2520alt%253D%2522%2522%253E-f3f3:443
 3 minutes ago
Best (most modern)
Host Support
Worst (least modern)
Host Support
%2527%253E%253Casdf%2520alt%253D%2522%2522%253E-f3f3
https://%2527%253E%253Casdf%2520alt%253D%2522%2522%253E-f3f3:443
 F (40)
This service is inspired in part by the HTTP/1.1 security concerns documented at http1mustdie.com. It is designed as a lightweight addition to ssllabs.com: run SSL Labs and follow its TLS/certificate/cipher recommendations, then use http1.dev to quickly spot legacy HTTP/1.x-only surfaces that are still missing HTTP/2 or HTTP/3.
Buy me a coffee