Re: Stricter TLS Usage in HTTP/2 from Cory Benfield on 2014-06-04 (ietf-http-wg@w3.org from April to June 2014)

From: Cory Benfield <cory@lukasa.co.uk>
Date: Wed, 4 Jun 2014 17:47:07 +0100
To: "Richard Wheeldon (rwheeldo)" <rwheeldo@cisco.com>
Cc: Patrick McManus <mcmanus@ducksong.com>, Yoav Nir <ynir.ietf@gmail.com>, Martin Thomson <martin.thomson@gmail.com>, William Chan (陈智昌) <willchan@chromium.org>, HTTP Working Group <ietf-http-wg@w3.org>, Adam Langley <agl@google.com>
Message-ID: <CAH_hAJGHUEE6C4DBwybLo8oRLaEPQuiNFitYmDmz6fb6GERU6Q@mail.gmail.com>

On 4 June 2014 17:34, Richard Wheeldon (rwheeldo) <rwheeldo@cisco.com> wrote:
> NPN would be fine IMO. Having neither would be a problem. The layering issues get potentially ugly. How would a lib know whether or not to allow a connection?
>

Happy to mandate at least one of NPN and ALPN for both servers and
clients. Servers _should_ support both but I see no reason to turn
that into a must.

Received on Wednesday, 4 June 2014 16:47:39 UTC