News for hackers. Stuff that matters.

A comment on HTTPS' massive speed advantage. Parent comment

Re:HTTPS' massive speed advantage by mikeash on Thursday July 21, 2016 @03:17PM (#12139309)
Pretty much the whole point of the article is that when you say "http vs https" you are no longer just saying TLS vs no TLS. It now means something more.
[ Parent | on HN ]
Re:HTTPS' massive speed advantage by jimktrains2 on Thursday July 21, 2016 @03:23PM (#12139342)
But does it? I mean, you can start a WebSockets session with an HTTP request too. No one says a WS server is an HTTP server and that HTTP is a confusing thing now.

HTTP2 can be started via an HTTP over TLS request, that doesn't mean that it's HTTPS as defined in https://tools.ietf.org/html/rfc2818 and https://tools.ietf.org/html/rfc7230

[ Parent | on HN ]
Re:HTTPS' massive speed advantage by mikeash on Thursday July 21, 2016 @05:19PM (#12140157)
If you assume a reasonably recent browser and server, then it does. Certainly one might not grant that assumption, but I don't think it's outright wrong to make it, either. Depends on your approach.
[ Parent | on HN ]
Re:HTTPS' massive speed advantage by jimktrains2 on Thursday July 21, 2016 @05:52PM (#12140356)
Why assume anything? Why not simply call things what they are? The issue is that browsers don't signal that you're using http2 and they decided nor to use a new schema either to help confuse us all. His point is literally based on nothing supporting http2 without TLS. What if something did? Would http also be a meaningless word? Why not call things what they are, not by what the browser is hiding.
[ Parent | on HN ]
Re:HTTPS' massive speed advantage by tedunangst on Thursday July 21, 2016 @03:53PM (#12139556)
To which people are saying, that's wrong. http2 implies https does not mean https implies http2.
[ Parent | on HN ]