You read me wrong then.
I'm opposed to a protocol which claims to "improve privacy" while leaving some of the most troubling privacy invasions in place.
If we are going to the trouble to upgrade HTTP, we fix all the serious problems we can.
I'm opposed to a protocol which claims to "improve privacy" while leaving some of the most troubling privacy invasions in place.
If we are going to the trouble to upgrade HTTP, we fix all the serious problems we can.
But an active man-in-the-middle attack at least has a chance of being detected, as opposed to the current passive sniffing being done on a wholesale basis. Do you not see any value in that?
(I have not followed the HTTP/2 development closely enough to comment on other areas of concern.)