On: Strengthening HTTP: A Personal View

[jimktrains2]

Beyond everything else, someone should have stopped and said "Wait, this is level 4 stuff we're implementing in level 7. There has to be a saner way"

I also find the naming very disingenuous. This is not even an HTTP-style protocol, it should not be named HTTP2.

As for people who want to require CA certs everywhere: Are all the free certs out there accepted by all browsers? (Honest question).