Re: Fwd: New Version Notification for draft-nottingham-http2-encryption-02.txt

Yes, they absolutely can be different.

In the 'opportunistic' world, you attempt to use TLS whether or not the
scheme is HTTP or HTTPS.
In the 'unauthenticated' world, you accept an unauthenticated endpoint when
the scheme is HTTP.

The latter depends on the former, but is otherwise completely separate.

-=R


On Wed, Dec 18, 2013 at 7:03 AM, Joseph Lorenzo Hall <joe@cdt.org> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
>
>
> On 12/17/13 5:47 PM, Peter Saint-Andre wrote:
> >
> > Opportunistic or unauthenticated?
>
> Serious question: are those different? Not sure if that has been
> hashed out yet, but willing to read more if I've missed it. best, Joe
>
> - --
> Joseph Lorenzo Hall
> Chief Technologist
> Center for Democracy & Technology
> 1634 I ST NW STE 1100
> Washington DC 20006-4011
> (p) 202-407-8825
> (f) 202-637-0968
> joe@cdt.org
> PGP: https://josephhall.org/gpg-key
> fingerprint: 3CA2 8D7B 9F6D DBD3 4B10  1607 5F86 6987 40A9 A871
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.13 (Darwin)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iQIcBAEBCAAGBQJSsbkqAAoJEF+GaYdAqahxLmUQAIEDuUyLvabSVKrU53f4ZOQD
> Xv5RHr66H7VCKHpSaepStGmavm3lzbNp6e2FeRftpn46ho99+vjmQLQUSA9U/G6j
> ohi2aFbcHYvjH7ca2q9y6M7Dl+elLHKHJxnn68gqDDq/yWTNeVgrq4It0Bh4xq2p
> qDYypQj8xyI6slw1VwJa7STHRhj7CwL4dlYE/BIyJQNCnJpqLj7bTF62GRFcQkKO
> 7p9/rvAbd2cYjNzodzb+JNzAKm1uSKRyj7ufUO61j2WKi7AO5uAWagMD+64trAhj
> hwGUqiDjuCpMoQlNC0MYR9ssL0QVI+/jmb6ps+ZcKzw1G1AxXX3eQd6CVTf2ez0s
> UzdxuRxxNviYkbiIqnraP4NxrA2oxH88h/fOG+BRJ0K64Wb3gCDpcD8wbb29CJpu
> zi3xnmZyGHWfV25rj5u3vlbLnbviZ4C8edSBeqwKBPs1LZ8ULhi+1acoZiBfvx/u
> 121NGKcC13dr09idTUk9d4JCvKbmCxsDtJ6TS/b6kL7DnkgX+ggq5KLcdowAFq8a
> P0Nkbh6C53C8t0X+jZRrqvGvPx7EvLvi0ocdhQTKUKqimVc44DhyVVs9NicNZdvZ
> +aIukLu+b55Gdo00WeqMh+LqZT5yBaDGmXQKAbKdWcKf6bHk+gfL+m+9xl6IXhZR
> ySbSvJzxdIfr93lztcJO
> =eApo
> -----END PGP SIGNATURE-----
>
>
>