TLS extension needed for HTTP/2.0
zhong.j.yu at gmail.com
Tue Jul 23 15:41:52 PDT 2013
HTTP/2.0 draft (based on google's SPDY) requires the use of a new TLS
extension (ALPN), see
The current javax.net.ssl API does not support that, so it'll be a
problem for someone trying to implement the HTTP/2.0 draft on Java
platform. Is there a remedy to that?
If javax.net.ssl needs further development to be able to support ALPN,
would you give a rough estimate on when it could be released? And
would it be back ported to earlier versions of Java?
What kind of API change do you envision that's necessary to expose
ALPN negotiation process to applications?
Note that HTTP/2.0 is in very early stage; it's possible that the
requirement of ALPN could be relaxed if there's difficulty to
implement it on popular platforms; see this thread:
Thank you very much,
More information about the security-dev