TLS extension needed for HTTP/2.0

Zhong Yu zhong.j.yu at gmail.com
Tue Jul 23 15:41:52 PDT 2013


Hi there,

HTTP/2.0 draft (based on google's SPDY) requires the use of a new TLS
extension (ALPN), see
http://tools.ietf.org/html/draft-ietf-httpbis-http2-04#section-3.3

The current javax.net.ssl API does not support that, so it'll be a
problem for someone trying to implement the HTTP/2.0 draft on Java
platform. Is there a remedy to that?

If javax.net.ssl needs further development to be able to support ALPN,
would you give a rough estimate on when it could be released? And
would it be back ported to earlier versions of Java?

What kind of API change do you envision that's necessary to expose
ALPN negotiation process to applications?

Note that HTTP/2.0 is in very early stage; it's possible that the
requirement of ALPN could be relaxed if there's difficulty to
implement it on popular platforms; see this thread:
http://lists.w3.org/Archives/Public/ietf-http-wg/2013JulSep/0425.html

Thank you very much,
Zhong Yu


More information about the security-dev mailing list