Cracking the Lens: Targeting HTTP's Hidden Attack-Surface
Modern websites are browsed through a lens of transparent systems built to enhance performance, extract analytics and supply numerous additional services. This almost invisible attack surface has been largely overlooked for years.
By James Kettle
Full Abstract & Presentation Materials:
https://www.blackhat.com/us-17/briefings.html#cracking-the-lens-targeting-https-hidden-attack-surface