> help standardize authentication > help protect privacy I think this is sort of answered by the headline - "HTTP/2 is done". If they had succumbed to the se

> help standardize authentication > help protect privacy I think this is sort of answered by the headline - "HTTP/2 is done". If they had succumbed to the second-system effect and added every bell and whistle that every HTTP user would ever want, there would be an endless period of bikeshedding and it would be years before you could even call the spec "done". They seem to have taken a more conservative approach - changing enough that HTTP 1.2 wasn't accurate, but also not going all-out and trying to define a post-Snowden quantum-computing-based KSTP (kitchen sink transport protocol).