Re: Removing SSL 3.0/Poodle

Forgive my ignorance with this question. Will another memo/standard/RFC be needed (such as http://tools.ietf.org/html/rfc2818) to explain the relationship between HTTP/2 and TLS?

--
Jim Manico
@Manicode
(808) 652-3805

> On Oct 21, 2014, at 4:56 AM, Julian Reschke <julian.reschke@gmx.de> wrote:
> 
>> On 2014-10-21 08:49, Matthew Kerwin wrote:
>> On 21 October 2014 16:22, Jim Manico <jim@manico.net
>> <mailto:jim@manico.net>>wrote:
>> 
>>    Now that SSL 3.0 is dead due to POODLE, is there any chance it can
>>    be removed from the HTTP2 spec? It's security theatre at best right now.
>> 
>> 
>> ​I didn't think SSL (any version) was in the HTTP/2 spec.​
>> ...
> 
> Nor in HTTP/1.1...
> 
> Best regards, Julian

Received on Tuesday, 21 October 2014 11:56:56 UTC