[Privoxy-users] Privoxy and HTTP/2

[Lee]

On 12/28/17, Lampshade  wrote:
> I didn't thinked about test suite.
> One the other hand https://http2.akamai.com
> is probably good test suite, because it
> is shielded by TLS.
> http://www.http2demo.io/
> seems to be not shielded, but Firefox debugger
> shows that when I run HTTP/2 test, images are
> transmitted by TLS and HTTP 1.1 are not.

you need to find an https:// test site for testing http/2

https://wiki.mozilla.org/Networking/http2
  Firefox will only be implementing HTTP/2 over TLS

https://en.wikipedia.org/wiki/HTTP/2
  Although the standard itself does not require usage of encryption,
most client implementations (Firefox, Chrome, Safari, Opera, IE, Edge)
have stated that they will only support HTTP/2 over TLS, which makes
encryption de facto mandatory.

> If site is over TLS/SSL privoxy don't do
>  its magic it is supposed to do.

Traffic is encrypted to/from sites using TLS/SSL; privoxy sees only
the encrypted traffic so all it can do is allow/deny by host name.  In
other words
{ +block }
foo.example.com/
  -- works
foo.example.com/.*\.js\?rnd=
  -- doesn't work

Regards,
Lee

>
> From: "Lee" <lerr g m.com>
> To: "Lampshade" <lamps czta.fm>;
> Subject: Re: [Privoxy-users] Privoxy and HTTP/2
>
>> On 12/28/17, Lampshade  wrote:
>> > Hello,
>> > I would like to know whether privoxy
>> > supports HTTP/2 sometime called "HTTP 2.0"
>> > protocol. If not, does support is planned?
>>
>> Do you know of a test suite somewhere?  In other words, how do you
>> tell if http/2 works correctly?
>>
>> https://http2.akamai.com/
>> You are using HTTP/2 right now! (server-push is used)
>> >>click on the "click here for a demo" button<<
>>
>> HTTP/1.1
>> Latency: 13ms
>> Load time: 0s
>>
>>    -- the picture was there when the page displayed
>>
>> HTTP/2
>> Latency: 17ms
>> Load time: 2.78s
>>
>>   -- seemed longer but maybe it was only 3 seconds watching the
>> picture slowly get painted
>>
>>
>> dunno if it matters or no but this was using firefox after going into
>> about:config and setting security.tls.version.max to 4, going to
>> https://www.ssllabs.com/ssltest/viewMyClient.html and seeing 'Protocol
>> Features / TLS 1.3   yes'
>>
>> Regards,
>> Lee
>>
>
>
>