@@ -38,7 +38,7 @@ prerequisite for a number of other technologies, and having a secure
3838site—regardless of its content—is never a bad thing. More on the first bit in a
3939moment, but for now I want to talk a little about security.
4040
41- I imagine that although most users won’t have much of a understanding as to the
41+ I imagine that although most users won’t have much of an understanding as to the
4242technical implications behind a secure or a not-secure site (I’m hesitant to use
4343the word _ insecure_ ), they are becoming aware that there is such thing as
4444security. With Google’s intent to [ mark certain websites as
@@ -59,12 +59,12 @@ HTTP/1.1 protocol that we’ve been using for almost two decades. It brings many
5959benefits to both developers and users, but many of its best features are centred
6060around performance:
6161
62- * Compressed headers: HTTP/1.1 sends its headers uncompressed, which creates a
63- surprising amount of overhead. HTTP/2 reduces that by compressing the response
64- headers as well as the response body.
65- * Multiplexing: get around head of line blocking and lack of parallelisation by
66- sending multiple assets asynchronously over the same TCP connection.
67- * Server push: allows developers to send late requested assets preemptively.
62+ * ** Compressed headers** : HTTP/1.1 sends its headers uncompressed, which creates
63+ a surprising amount of overhead. HTTP/2 reduces that by compressing the
64+ response headers as well as the response body.
65+ * ** Multiplexing:** get around head of line blocking and lack of parallelisation
66+ by sending multiple assets asynchronously over the same TCP connection.
67+ * ** Server push** : allows developers to send late requested assets preemptively.
6868
6969A lot of HTTP/2’s additions will moot the domain sharding, concatenating, and
7070inlining strategies we came up with as hacks, and will instead allow us to
@@ -75,18 +75,18 @@ performance boost right out of the box.
7575Further, HTTP/2 is required in order for certain other technologies to be
7676utilised:
7777
78- * Brotli, an improved compression algorithm from Google, needs to run over
78+ * ** Brotli** , an improved compression algorithm from Google, needs to run over
7979 HTTP/2 because of third parties (ISPs, proxies, etc.) infamously trying to
80- recompress already compressed transfer. By preventing them getting at at all,
81- it means that they can’t try running gzip over a new, unknknow content
82- encoding (e.g. Brotli).
83- * Service Worker absolutely needs to run over HTTP/2, because it’s basically a
84- man in the middle. We’re building a proxy that sits in between our users and
80+ recompress already compressed transfer. By preventing them getting at it in
81+ the first place, it means that they can’t try running gzip over a new, unknown
82+ content encoding (e.g. Brotli).
83+ * ** Service Worker** absolutely needs to run over HTTP/2, because it’s basically
84+ a man in the middle. We’re building a proxy that sits in between our users and
8585 our servers, so the need for security there should be pretty clear.
8686
8787Currently I’m not making that much use of anything HTTP/2 offers me other than
8888multiplexing and header compression (because I didn’t even have to lift a
89- finger) for those. My site is already pretty slim, and I’m serving so few assets
89+ finger for those) . My site is already pretty slim, and I’m serving so few assets
9090that one could almost argue over-engineering, but one really great example of
9191where I will benefit from HTTP/2 multiplexing is this [ relatively large list of
9292images on the homepage] ( /#section:clients ) .
@@ -95,7 +95,7 @@ images on the homepage](/#section:clients).
9595
9696Support for HTTP/2 is [ pretty good] ( http://caniuse.com/#feat=http2 ) , and always
9797improving. Servers capable of serving over HTTP/2 will also still deliver to
98- HTTP/1.1 clients, so nothing will break.
98+ HTTP/1.x clients, so nothing will break.
9999
100100However, it might not be time for your company to switch over too.
101101Unfortunately, HTTP/2 best practices become bad practices in HTTP/1.1, and
0 commit comments