Hi Mark,

On Tue, May 10, 2016 at 07:59:02AM -0700, Mark Shuttleworth wrote:
> Oh, I would think we definitely want to enable http2 in Xenial by
> default! Jay can you take care of that?

HTTP/2 support in Apache is still considered experimental by
upstream[1], so we didn't enable it in the LTS under security team
guidance[2]. Support is available in nginx though, as that went stable
in time.

We intend to enable HTTP/2 support for Apache in an SRU as soon as
upstream consider it stable and no longer experimental.

The concern is that both implementation and configuration directives may
change, and we can't realistically follow this in the LTS timeframe
without breaking production users. This in turn would compromise
security since upstream security patches will no longer apply and be
tough to backport.

A weighing up of regression risk to users will need to influence any
future SRU decision to enable support, of course.

Robie

[1] https://httpd.apache.org/docs/2.4/mod/mod_http2.html
[2] 
https://wiki.ubuntu.com/XenialXerus/ReleaseNotes#HTTP.2F2_support_in_Apache_httpd

Attachment: signature.asc
Description: PGP signature

-- 
Juju mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/juju

Reply via email to