Is TLS mandatory for HTTP/2?

Viewed 3946

According to the HTTP/2 spec (rfc7540), implementations of HTTP/2 require TLS version 1.2 or higher.

Implementations of HTTP/2 MUST use TLS version 1.2 [TLS12] or higher for HTTP/2 over TLS

However, in the HTTP2 FAQ documentation, HTTP/2 does not require encryption(e.g., TLS).

No. After extensive discussion, the Working Group did not have consensus to require the use of encryption (e.g., TLS) for the new protocol.

I am little bit confused. Can you explain it to me to understand it more?

0 Answers
Related