Re: [jetty-dev] State of HTTP/2 in 9.3.0-SNAPSHOT

[Greg Wilkins <gregw@xxxxxxxxxxx>]

I just double checked the spec regarding the || and it is correct as the spec says:

   Deployments of HTTP/2 that negotiate TLS 1.3 or higher need only
   support and use the SNI extension; deployments of TLS 1.2 are subject
   to the requirements in the following sections.

So if you are using TLS 1.3, there are no black ciphers.... at least not ones mandated by the HTTP2 specification.  You can still exclude ciphers from the entire TLS mechanism via the SslContextFactory in the normal way.

cheers

On 9 April 2015 at 09:22, Greg Wilkins <gregw@xxxxxxxxxxx> wrote:

Simone,

I think your analysis is good.  However, I do think it worthwhile to add the condition to not apply blacklist logic to < h2-16

cheers