Re: HTTPS 2.0 without TLS extension?

On Mon, Jul 22, 2013 at 11:47:48AM -0500, Zhong Yu wrote:
> Suppose a TLS connection is established without ALPN. Then an HTTP/1.1
> request is sent over with Upgrade: HTTP/2.0. How should the server
> respond?
<snip>

There's also second abnormal case:
TLS handshake without ALPN, but the application data starts with
HTTP/2.0 magic...

> Though "Upgrade" mechanism is less ideal than ALPN, since the server
> must support it anyway on TCP connections, I don't see why we should
> forbid it on TLS connections.

What about servers that are not willing to implement upgrade (it is fair
amount of complexity)?

I.e. is there path to totally obsolete HTTP/1.1 in the far future?

-Ilari

Received on Monday, 22 July 2013 19:24:38 UTC