Posté par: igor51 le avril 08, 2015, 02:00:51
Firefox 37.0 added support for a security-enhancing feature in HTTP/2 known as Alternative Services.
Unfortunately, the new feature had a rather bad HTTPS security hole all of its own...
Source: Firefox issues brand new update to fix HTTPS security hole in new update (http://feedproxy.google.com/~r/nakedsecurity/~3/m0is3Lz18A0/)