@@ -52,6 +52,18 @@ To this end, I think that HTTPS is as much an exercise in branding and trust as
5252it is in security, and that it will steadily become more and more ubiquitous.
5353This is only a good thing.
5454
55+ Further, HTTPS is required in order for certain other technologies to be
56+ utilised:
57+
58+ * ** Brotli** , an improved compression algorithm from Google, needs to run over
59+ HTTPS because of third parties (ISPs, proxies, etc.) infamously trying to
60+ recompress already compressed transfer. By preventing them getting at it in
61+ the first place, it means that they can’t try running gzip over a new, unknown
62+ content encoding (e.g. Brotli).
63+ * ** Service Worker** absolutely needs to run over HTTPS, because it’s basically
64+ a man in the middle. We’re building a proxy that sits in between our users and
65+ our servers, so the need for security there should be pretty clear.
66+
5567## HTTP/2
5668
5769HTTP/2 (or H2, as it’s commonly referred to) is a vast, vast improvement on the
@@ -72,18 +84,6 @@ deliver faster experiences with simpler architectures: we can optimise assets
7284all we like, but there is no denying that HTTP/2 gives developers an astounding
7385performance boost right out of the box.
7486
75- Further, HTTP/2 is required in order for certain other technologies to be
76- utilised:
77-
78- * ** Brotli** , an improved compression algorithm from Google, needs to run over
79- HTTP/2 because of third parties (ISPs, proxies, etc.) infamously trying to
80- recompress already compressed transfer. By preventing them getting at it in
81- the first place, it means that they can’t try running gzip over a new, unknown
82- content encoding (e.g. Brotli).
83- * ** Service Worker** absolutely needs to run over HTTP/2, because it’s basically
84- a man in the middle. We’re building a proxy that sits in between our users and
85- our servers, so the need for security there should be pretty clear.
86-
8787Currently I’m not making that much use of anything HTTP/2 offers me other than
8888multiplexing and header compression (because I didn’t even have to lift a
8989finger for those). My site is already pretty slim, and I’m serving so few assets
0 commit comments