4 ms·

Oh good point I actually forgot `https` was separate. Forgive my ignorance but how does SSL work with http2? Will there also be an https2? I haven't actually pl

Oh good point I actually forgot `https` was separate. Forgive my ignorance but how does SSL work with http2? Will there also be an https2? I haven't actually played with http2 yet and this gives me a good excuse to.

reificator 9y ago
HTTP 2 has a defacto requirement of SSL to function. Technically, it's not required by the standard. However every existing implementation does require it, with several vendors claiming they will never support HTTP 2 without encryption.
- daurnimator 9y ago
  > However every existing implementation does require it lua-http does not. https://github.com/daurnimator/lua-http/ https://github.com/daurnimator/lua-http/ Though the client won't auto negotiate http2 without TLS (yet... https://github.com/daurnimator/lua-http/blob/0b54603bfc132dcb9add76a61d3b50b4439031b2/http/client.lua#L73 https://github.com/daurnimator/lua-http/blob/0b54603bfc132dc...), you have to tell it to do so explicitly.
  - reificator 9y ago
    I was debating putting in a disclaimer that I don't know all the existing implementations, but I was posting from my phone so I skipped it. Thanks for both links, that's good information.
- manojlds 9y ago
  Every browser vendor I suppose, not every client.
- Matthias247 9y ago
  If you insert "browser" between "existing" and "implementation" then it's correct. Most libraries also support unencrypted HTTP/2. E.g. nghttp2 (as used here in node.js, and also used by others like apache and curl) supports unencrypted connections. My own library for C# (https://github.com/Matthias247/http2dotnet https://github.com/Matthias247/http2dotnet) does too. The Go library might be a little bit of a special case, as it actually supports it, but the required functions are (or at least were) not exposed in the standard libraries http package. They should however be available in the x/net/http2 package.
  - reificator 9y ago
    Yep, I was typing on my phone and left out the "that I know of" disclaimer. Good info, and thanks for the link.
- BinaryIdiot 9y ago
  Oh good to know. I need to read up more on this. Thanks!

reificator 9y ago

HTTP 2 has a defacto requirement of SSL to function. Technically, it's not required by the standard. However every existing implementation does require it, with several vendors claiming they will never support HTTP 2 without encryption.

daurnimator 9y ago
> However every existing implementation does require it lua-http does not. https://github.com/daurnimator/lua-http/ https://github.com/daurnimator/lua-http/ Though the client won't auto negotiate http2 without TLS (yet... https://github.com/daurnimator/lua-http/blob/0b54603bfc132dcb9add76a61d3b50b4439031b2/http/client.lua#L73 https://github.com/daurnimator/lua-http/blob/0b54603bfc132dc...), you have to tell it to do so explicitly.
- reificator 9y ago
  I was debating putting in a disclaimer that I don't know all the existing implementations, but I was posting from my phone so I skipped it. Thanks for both links, that's good information.
manojlds 9y ago
Every browser vendor I suppose, not every client.
Matthias247 9y ago
If you insert "browser" between "existing" and "implementation" then it's correct. Most libraries also support unencrypted HTTP/2. E.g. nghttp2 (as used here in node.js, and also used by others like apache and curl) supports unencrypted connections. My own library for C# (https://github.com/Matthias247/http2dotnet https://github.com/Matthias247/http2dotnet) does too. The Go library might be a little bit of a special case, as it actually supports it, but the required functions are (or at least were) not exposed in the standard libraries http package. They should however be available in the x/net/http2 package.
- reificator 9y ago
  Yep, I was typing on my phone and left out the "that I know of" disclaimer. Good info, and thanks for the link.
BinaryIdiot 9y ago
Oh good to know. I need to read up more on this. Thanks!