Port 80 deprecation

• From: Soni L. <fakedme+http@gmail.com>
• Date: Wed, 2 Jun 2021 08:12:10 -0300
• To: HTTP Working Group <ietf-http-wg@w3.org>
• Message-ID: <41fb81f5-4978-f8da-d0de-7af26cd20e74@gmail.com>

So uh, with TLS-SRP around, there's no real reason to keep supporting
port 80, as every use-case supported by port 80 can be handled with
TLS-SRP instead.

In particular, LAN/embedded can be handled with TLS-SRP, with great
benefits:
- It's TLS, which, for browsers, makes it a secure context.
- Deprecating port 80 would free it up for other uses. There are only
65535 port numbers, but way more than 65535 applications that use them.
Not only that, but a single application may even use multiple ports!
- Actually encourages IoT devices to provide security by default.

Thoughts?

Received on Wednesday, 2 June 2021 11:13:18 UTC