A reported "HTTP/2 Bomb" pairs compression pressure with Slowloris-style connection holding, showing how default web protocol behavior can turn into rapid denial-of-service risk.