A slow loris attack is an attack of incomplete GET requests to most famously an Apache server because the server does not timeout the connection made after extremely long periods of time, from my understanding.
GET / HTTP/1.1\r\nHost: hostname\r\nUserAgent: user-agent\r\n"
GET / HTTP/1.1\r\nHost: hostname\r\nUserAgent: user-agent"
Here are two examples of incomplete get requests that could be used for slow loris attacks (correct me if I'm wrong).
My question is, for each connection, how are these meant to be sent. Is there meant to be a time interval? Is it meant to be sent in parts? Or could you just send them whole with/without a time interval and it would still work?
And lastly is the slow loris attack outdated?