Bug#859930: apt-transport-https: Add http/2 support

[Kurt Roeckx <kurt@roeckx.be>]

On Sun, Apr 09, 2017 at 02:53:17PM +0200, Julian Andres Klode wrote:
> Control: tag -1 wontfix
> 
> On Sun, Apr 09, 2017 at 01:52:03PM +0200, Kurt Roeckx wrote:
> > Package: apt-transport-https
> > Severity: wishlist
> > 
> > Hi,
> > 
> > Can you add http/2 support?
> 
> I'd assume that it currently has http/2 support, as it's using
> curl. If so, that will likely be dropped in the next release
> cycle, if we add TLS support to the http method.

It's doing ALPN, but it's only sending http/1.1 in it. It's not
offering h2 by default. On the other hand when I use "curl" it
does use h2. I don't think the library enables it by default.

> I don't think we want to implement http/2 support in apt at
> all - implementing the binary framing, multiplexing, header
> compression, and all the other stuff is a lot of work.

I didn't suggest you write it yourself.

> I don't think there is anything to gain from HTTP/2 support
> - we don't fetch small files, so all the multiplexing, binary
> framing, and header compression is basically irrelevant.

I guess my main motivation for asking for this is to try and do
something about traffic analysis, and I think you can make it
harder using http/2.


Kurt