RE: https://mastodon.social/@tom7/116400371274962195
Whenever I get the chance while talking to #firefox or #chrome people or #http folks in general, I try to emphasise this one thing:
DO NOT BREAK CLEAR HTTP/1.1 (non TLS)
While I am just a simple guy who just only sometimes happens to be lucky to DTRT, mostly out of sheer luck based on experience and principles I adopted during my teenage years, the brilliant @tom7@mastodon.social has the mental and other capacity to explain the reasons much better than I ever could.
Please read the paper.
Heinous Type Tom7 Project Summary:
@slink@fosstodon.org I say don't break HTTP/1.1 at all, even if you have to force TLS (like you're a bank website for example)
Unfortunately too many webmasters seem to think that HTTP/1.1 = scraper. They don't think that there are people who intentionally disable HTTP/2 and HTTP/3 in their browser. :\