Re: null ciphers in 9.2.2

Great, so we copy/paste TLS1.3 requirements into our draft.  That makes us
good for how many decades?  When HTTP/1.1 was specified TLS was at version
1.0.  If it had hard coded TLS1.1 requirements then we would not be running
h1 over TLS1.2 today.

I am not saying that these are not good restrictions to have on the
majority use-case for h2.  I'm just saying that they are restrictions that
are being developed elsewhere and we have no need to become the enforcer of
them, nor do they generally apply to all our current and future possible
use-cases.

Received on Wednesday, 1 October 2014 00:10:40 UTC