Re: HTTPS 2.0 without TLS extension?

Martin Thomson <martin.thomson@gmail.com> Tue, 23 July 2013 17:58 UTC

Return-Path: <ietf-http-wg-request@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 50AEA21E80D6 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Tue, 23 Jul 2013 10:58:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.216
X-Spam-Level:
X-Spam-Status: No, score=-9.216 tagged_above=-999 required=5 tests=[AWL=1.383, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eN-8rGzLltpL for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Tue, 23 Jul 2013 10:58:00 -0700 (PDT)
Received: from frink.w3.org (frink.w3.org [128.30.52.56]) by ietfa.amsl.com (Postfix) with ESMTP id E91A911E830F for <httpbisa-archive-bis2Juki@lists.ietf.org>; Tue, 23 Jul 2013 10:57:59 -0700 (PDT)
Received: from lists by frink.w3.org with local (Exim 4.72) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1V1gqD-0001F2-3i for ietf-http-wg-dist@listhub.w3.org; Tue, 23 Jul 2013 17:57:41 +0000
Resent-Date: Tue, 23 Jul 2013 17:57:41 +0000
Resent-Message-Id: <E1V1gqD-0001F2-3i@frink.w3.org>
Received: from maggie.w3.org ([128.30.52.39]) by frink.w3.org with esmtp (Exim 4.72) (envelope-from <martin.thomson@gmail.com>) id 1V1gq4-0001EC-MG for ietf-http-wg@listhub.w3.org; Tue, 23 Jul 2013 17:57:32 +0000
Received: from mail-we0-f176.google.com ([74.125.82.176]) by maggie.w3.org with esmtps (TLS1.0:RSA_ARCFOUR_SHA1:16) (Exim 4.72) (envelope-from <martin.thomson@gmail.com>) id 1V1gq4-00035o-18 for ietf-http-wg@w3.org; Tue, 23 Jul 2013 17:57:32 +0000
Received: by mail-we0-f176.google.com with SMTP id q56so1188254wes.7 for <ietf-http-wg@w3.org>; Tue, 23 Jul 2013 10:57:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=RdIRpoe3/jVR3ruDupCmZEL1xvYJ5KogzFKRcN/XC8s=; b=qfrOlbSX0UqQ4uq1OH+GhcrtLbR9bH4Jerkct9h/ACjg8bRIBscZzP+i7Zy0x1a3Pi GXjJWx1dpFesX1ElhpAl4nQ0YcorUe7UN8yWSiJv3l4pQ9smcdZxHx20BOEmZnjVS61Y fgwqLhjWMT8x4WEdY1Gm3NhyYXf60XBJ1GZv7CELqpVqxs/UMyy2yaWbNODVzZgALFLK 3cLuWmGX12lySLf8J6rH2yP03TnpSQL+EJMJP7DIDhq0QTFBfnjcsU9cSD1kOAXNuTOm F7tdMX7dtLmXkKISmc9Dum+F4Kh1ZSXSmS1DAjXsJEqBldA1QMYSPbaBrvmx3hQwyHnd IehA==
MIME-Version: 1.0
X-Received: by 10.194.78.110 with SMTP id a14mr23989461wjx.84.1374602225883; Tue, 23 Jul 2013 10:57:05 -0700 (PDT)
Received: by 10.194.60.46 with HTTP; Tue, 23 Jul 2013 10:57:05 -0700 (PDT)
In-Reply-To: <9D94920D-9272-499E-AA06-E8E3EF202BA4@checkpoint.com>
References: <CACuKZqEBAqXs-cQF1U-g3npaXGR0LEoXZYxDv-3a+ftn-YG=_g@mail.gmail.com> <CAA4WUYjS=JXYAYKe0ueqUFbdEUC3pM8xuj--b=F=WPgnSc9xYg@mail.gmail.com> <9D94920D-9272-499E-AA06-E8E3EF202BA4@checkpoint.com>
Date: Tue, 23 Jul 2013 10:57:05 -0700
Message-ID: <CABkgnnVFd1-mp5XU5U15yQ=DfxtvyVDh3YznFRkJ4sM8rSGrFw@mail.gmail.com>
From: Martin Thomson <martin.thomson@gmail.com>
To: Yoav Nir <ynir@checkpoint.com>
Cc: "William Chan (陈智昌)" <willchan@chromium.org>, Zhong Yu <zhong.j.yu@gmail.com>, HTTP Working Group <ietf-http-wg@w3.org>
Content-Type: text/plain; charset="UTF-8"
Received-SPF: pass client-ip=74.125.82.176; envelope-from=martin.thomson@gmail.com; helo=mail-we0-f176.google.com
X-W3C-Hub-Spam-Status: No, score=-3.5
X-W3C-Hub-Spam-Report: AWL=-2.685, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001
X-W3C-Scan-Sig: maggie.w3.org 1V1gq4-00035o-18 e1e9a4f0a07af2b73e55d004c4edd90c
X-Original-To: ietf-http-wg@w3.org
Subject: Re: HTTPS 2.0 without TLS extension?
Archived-At: <http://www.w3.org/mid/CABkgnnVFd1-mp5XU5U15yQ=DfxtvyVDh3YznFRkJ4sM8rSGrFw@mail.gmail.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/18882
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

On 23 July 2013 10:52, Yoav Nir <ynir@checkpoint.com> wrote:
> What about a regular TLS handshake (without the ALPN extension) followed by the HTTP/2 magic?

Probably not a good idea on the web generally, unless you have a
really good hint that the server is OK with that.