Skip to content

Standard

QUIC

QUIC is an IETF transport protocol (RFC 9000) built on UDP that multiplexes streams with built-in encryption and faster handshakes; it underlies HTTP/3.

Known aliases

  • HTTP/3
  • QUIC protocol
  • RFC 9000

Current stories

buildOne report1 publisher

Meta moves Instagram Live ingest on iOS and Android to Media over QUIC

Meta says Instagram Live video ingest on iOS and Android now runs on Media over QUIC, an IETF standard still in development. Its case for folding separate streaming stacks into one is stated as intent, and ingest is the piece the post reports as shipped.

Reality

Evidence35
Adoption30
Hype gap+10
Incentives40
Confidence55
securityOne report1 publisher

Turbo Intruder hits 100,000 requests a second from a laptop over HTTP/3

PortSwigger has shipped HTTP/3 support in Turbo Intruder and a Burp Suite adapter, pushing more than three times the request rate it managed over HTTP/1.1 and adding two QUIC race techniques for tighter timing windows.

Publishers:portswigger.net

Reality

Evidence52
Adoption14
Hype gap+20
Incentives78
Confidence58
buildOne report1 publisher

HTTP/2 gives a lossy mobile link one TCP connection to stall instead of six

A dev.to guide walks Laravel apps from HTTP/1.1 to HTTP/3 on nginx, and the part worth reading twice is its admission that the middle step can hurt, because one connection carrying 40 streams stalls on one lost packet.

Publishers:dev.to

Reality

Evidence62
Adoption75
Hype gap+5
Incentives50
Confidence66
buildOne report1 publisher

Solana leaders discard below-floor transactions before verifying their signatures

A dev.to write-up counts seven points inside the validator where a transaction vanishes with no log and no fee charged, beginning with the priority floor a leader publishes once its 100,000-packet buffer is 99 percent full.

Publishers:dev.to

Reality

Evidence35
Adoption
Not scored
Hype gap+25
Incentives20
Confidence40
investConfirmed3 publishers

Solana adds 2,864 bytes to its transaction ceiling at epoch 1035

Transaction V1 went live on Solana mainnet at epoch 1035 with a 4,096-byte ceiling. Senders opt in and the older formats keep working, so the required updates fall on RPC providers, indexers and explorers.

Perspective Coverage

3 publishers
Builder
Builder 37%
Operator
Operator 30%
Investor
Investor 33%

Reality

Evidence80
Adoption52
Hype gap+28
Incentives60
Confidence72
buildOne report1 publisher

Node ignores the corporate root certificate that the browser on the same laptop trusts

TLS inspection re-signs every connection with a root an administrator installed in the operating system trust store. Node, Python's certifi and Java's cacerts do not read that store, so one machine gives two different answers.

Publishers:dev.to

Reality

Evidence58
Adoption
Not scored
Hype gap+12
Incentives20
Confidence55
investOne report1 publisher

Solana's 4,096-byte transactions break the tools that only read blocks

The September 9 format change is optional for senders and mandatory for anyone parsing blocks, and the Jito bundle data Anza used to size it says a 4,096-byte ceiling absorbs between half and two thirds of the workloads that needed a workaround.

Reality

Evidence60
Adoption38
Hype gap+15
Incentives58
Confidence55
buildOne report1 publisher

OpenAI fences GPT-Live's tool use and persistence behind an async RPC boundary

The live path runs only the media pipeline and the inference loop, which buys isolated optimization but forces per-session capacity reservation and a context migration that has to work during ordinary drains.

Publishers:infoq.com

Reality

Evidence40
Adoption32
Hype gap+10
Incentives68
Confidence58
buildOne report1 publisher

Make HTTP/3 earn its place in your Unity client

Unity 6.5 shipped a protocol pin whose enum tops out at HTTP/2, which tells you where the engine puts the risk. QUIC only pays for concurrent, small-object traffic, and only if your CDN negotiates it.

Publishers:dev.to

Reality

Evidence52
Adoption28
Hype gap−12
Incentives30
Confidence50
buildOne report1 publisher

nginx quietly skips OCSP stapling until a resolver appears in scope

The dangerous nginx bugs are the ones that emit no runtime signal at all, so the only artefact carrying the evidence is the config text itself. Stapling with no resolver in scope is the cleanest case of the class.

Publishers:dev.to

Reality

Evidence70
Adoption20
Hype gap+8
Incentives52
Confidence62
securityOne report1 publisher

QUICSILVER runs its C2 over QUIC, and most port-443 inspection is scoped to TCP

Seqrite's Myanmar campaign hides a Go backdoor's traffic in UDP 443, with a single HTTP request in the whole chain. The monitoring gap travels regardless of your threat model.

Reality

Evidence54
Adoption32
Hype gap+12
Incentives62
Confidence48
buildOne report1 publisher

The DNS check passed. Chromium can still connect somewhere else.

A Playwright release gate stops handing hostnames back to the browser and hands its proxy an approved address set instead, because hostname allowlists do not survive a second lookup.

Publishers:dev.to

Reality

Evidence36
Adoption10
Hype gap+5
Incentives70
Confidence45
investOne report1 publisher

Solana's 4,096-byte transaction ceiling lands with about 420 bytes of slack

Transaction v1 heads to testnet in late August 2026 with a 3.3x bigger payload. It also deletes Address Lookup Tables, which 62% of sampled traffic was using.

Reality

Evidence42
Adoption24
Hype gap+14
Incentives
Not scored
Confidence44
buildOne report1 publisher

Live video is two protocol decisions, not one, and your CDN is fighting your latency target

A practitioner's guide argues most live streaming failures start by collapsing ingest and delivery into a single choice. The rest come from a player buffer nobody checked.

Publishers:dev.to

Reality

Evidence44
Adoption
Not scored
Hype gap−6
Incentives24
Confidence42
buildOne report1 publisher

Every test passed on a QUIC transport that no code path had ever constructed

A one-line grep found three references to a 500-line networking layer: a struct, its impl, and a re-export. The bugs it was hiding were the ordinary kind.

Publishers:dev.to

Reality

Evidence62
Adoption
Not scored
Hype gap−5
Incentives32
Confidence55