@funkylab @hrbrmstr @ZikZak @bert_hubert A Gzip bomb is more interesting here, as they do want to read the content of the HTML page, so they wil need to unzip and that will blow up their memory. They probably don’t care about the contents of a ZIP file.