3 ms·
> SPDY does not exist without SSL, nor will it. Can you elaborate on this, or provide a link with more context? Almost all TLS/NPN references are missing from
by re 15y ago
> SPDY does not exist without SSL, nor will it.
Can you elaborate on this, or provide a link with more context? Almost all TLS/NPN references are missing from the current SPDY draft spec. (I've found webpages that repeat the SSL requirement assertion, but none that source it or explain why.)
- JoshTriplett 15y agoThe SPDY draft spec doesn't seem to include any of the encryption bits; I don't know why. I've read documents explaining the details before (as well as expressing very strong opinions about the (lack of) merit of a modern protocol supporting a non-encrypted mode), but I can't seem to find them at the moment. As far as I know, SPDY's protocol always builds on an SSL session, not a raw socket connection. Opportunistic SPDY connections to HTTP servers rely entirely on SSL "next protocol negotiation" (NPN); a SPDY server will indicate that it supports SPDY to an HTTPS client via NPN. SPDY also uses SSL to avoid interference from proxies that would otherwise break attempts to use SPDY on what started out looking like an HTTP connection.