On Sun, Apr 09, 2017 at 02:53:17PM +0200, Julian Andres Klode wrote: > Control: tag -1 wontfix > > On Sun, Apr 09, 2017 at 01:52:03PM +0200, Kurt Roeckx wrote: > > Package: apt-transport-https > > Severity: wishlist > > > > Hi, > > > > Can you add http/2 support? > > I'd assume that it currently has http/2 support, as it's using > curl. If so, that will likely be dropped in the next release > cycle, if we add TLS support to the http method.
It's doing ALPN, but it's only sending http/1.1 in it. It's not offering h2 by default. On the other hand when I use "curl" it does use h2. I don't think the library enables it by default. > I don't think we want to implement http/2 support in apt at > all - implementing the binary framing, multiplexing, header > compression, and all the other stuff is a lot of work. I didn't suggest you write it yourself. > I don't think there is anything to gain from HTTP/2 support > - we don't fetch small files, so all the multiplexing, binary > framing, and header compression is basically irrelevant. I guess my main motivation for asking for this is to try and do something about traffic analysis, and I think you can make it harder using http/2. Kurt

