Thankfully the vast majority of servers are not creating MPTCP listeners by default (that I'm aware of).
Not sure why the article doesn't mention it, but you can specifically check for MPTCP listeners using `ss -M`.
Not sure why the article doesn't mention it, but you can specifically check for MPTCP listeners using `ss -M`.
> ListenConfig now uses MPTCP by default on systems where it is supported (currently on Linux only).
This seems to imply basically any golang server built since February 2025 is going to be at least attempting to use it.
Luckily though, ListenConfig lets you override this https://cs.opensource.google/go/go/+/refs/tags/go1.27.3:src/...
I was vulnerable myself by using Caddy (although MPTCP is not a prerequisite).
Want a big name? RedHat.